google-native.assuredworkloads/v1beta1.getWorkload
Explore with Pulumi AI
Gets Assured Workload associated with a CRM Node
Using getWorkload
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getWorkload(args: GetWorkloadArgs, opts?: InvokeOptions): Promise<GetWorkloadResult>
function getWorkloadOutput(args: GetWorkloadOutputArgs, opts?: InvokeOptions): Output<GetWorkloadResult>
def get_workload(location: Optional[str] = None,
organization_id: Optional[str] = None,
workload_id: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetWorkloadResult
def get_workload_output(location: Optional[pulumi.Input[str]] = None,
organization_id: Optional[pulumi.Input[str]] = None,
workload_id: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetWorkloadResult]
func LookupWorkload(ctx *Context, args *LookupWorkloadArgs, opts ...InvokeOption) (*LookupWorkloadResult, error)
func LookupWorkloadOutput(ctx *Context, args *LookupWorkloadOutputArgs, opts ...InvokeOption) LookupWorkloadResultOutput
> Note: This function is named LookupWorkload
in the Go SDK.
public static class GetWorkload
{
public static Task<GetWorkloadResult> InvokeAsync(GetWorkloadArgs args, InvokeOptions? opts = null)
public static Output<GetWorkloadResult> Invoke(GetWorkloadInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetWorkloadResult> getWorkload(GetWorkloadArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
function: google-native:assuredworkloads/v1beta1:getWorkload
arguments:
# arguments dictionary
The following arguments are supported:
- Location string
- Organization
Id string - Workload
Id string
- Location string
- Organization
Id string - Workload
Id string
- location String
- organization
Id String - workload
Id String
- location string
- organization
Id string - workload
Id string
- location str
- organization_
id str - workload_
id str
- location String
- organization
Id String - workload
Id String
getWorkload Result
The following output properties are available:
- Billing
Account string Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form
billingAccounts/{billing_account_id}
. For example,billingAccounts/012345-567890-ABCDEF
.- Cjis
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload CJISSettings Response Input only. Immutable. Settings specific to resources needed for CJIS.
- Compliance
Regime string Immutable. Compliance Regime associated with this workload.
- Compliance
Status Pulumi.Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload Compliance Status Response Count of active Violations in the Workload.
- Compliant
But List<string>Disallowed Services Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment."
- Create
Time string Immutable. The Workload creation timestamp.
- Display
Name string The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
- Ekm
Provisioning Pulumi.Response Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload Ekm Provisioning Response Response Optional. Represents the Ekm Provisioning State of the given workload.
- Enable
Sovereign boolControls Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
- Etag string
Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
- Fedramp
High Pulumi.Settings Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload Fedramp High Settings Response Input only. Immutable. Settings specific to resources needed for FedRAMP High.
- Fedramp
Moderate Pulumi.Settings Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload Fedramp Moderate Settings Response Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
- Il4Settings
Pulumi.
Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload IL4Settings Response Input only. Immutable. Settings specific to resources needed for IL4.
- Kaj
Enrollment stringState Represents the KAJ enrollment state of the given workload.
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
- Labels Dictionary<string, string>
Optional. Labels applied to the workload.
- Name string
Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
- Partner string
Optional. Partner regime associated with this workload.
- Provisioned
Resources stringParent Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
- Resource
Settings List<Pulumi.Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload Resource Settings Response> Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
- Resources
List<Pulumi.
Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload Resource Info Response> The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
- Saa
Enrollment Pulumi.Response Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload Saa Enrollment Response Response Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
- Billing
Account string Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form
billingAccounts/{billing_account_id}
. For example,billingAccounts/012345-567890-ABCDEF
.- Cjis
Settings GoogleCloud Assuredworkloads V1beta1Workload CJISSettings Response Input only. Immutable. Settings specific to resources needed for CJIS.
- Compliance
Regime string Immutable. Compliance Regime associated with this workload.
- Compliance
Status GoogleCloud Assuredworkloads V1beta1Workload Compliance Status Response Count of active Violations in the Workload.
- Compliant
But []stringDisallowed Services Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment."
- Create
Time string Immutable. The Workload creation timestamp.
- Display
Name string The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
- Ekm
Provisioning GoogleResponse Cloud Assuredworkloads V1beta1Workload Ekm Provisioning Response Response Optional. Represents the Ekm Provisioning State of the given workload.
- Enable
Sovereign boolControls Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
- Etag string
Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
- Fedramp
High GoogleSettings Cloud Assuredworkloads V1beta1Workload Fedramp High Settings Response Input only. Immutable. Settings specific to resources needed for FedRAMP High.
- Fedramp
Moderate GoogleSettings Cloud Assuredworkloads V1beta1Workload Fedramp Moderate Settings Response Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
- Il4Settings
Google
Cloud Assuredworkloads V1beta1Workload IL4Settings Response Input only. Immutable. Settings specific to resources needed for IL4.
- Kaj
Enrollment stringState Represents the KAJ enrollment state of the given workload.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
- Labels map[string]string
Optional. Labels applied to the workload.
- Name string
Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
- Partner string
Optional. Partner regime associated with this workload.
- Provisioned
Resources stringParent Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
- Resource
Settings []GoogleCloud Assuredworkloads V1beta1Workload Resource Settings Response Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
- Resources
[]Google
Cloud Assuredworkloads V1beta1Workload Resource Info Response The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
- Saa
Enrollment GoogleResponse Cloud Assuredworkloads V1beta1Workload Saa Enrollment Response Response Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
- billing
Account String Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form
billingAccounts/{billing_account_id}
. For example,billingAccounts/012345-567890-ABCDEF
.- cjis
Settings GoogleCloud Assuredworkloads V1beta1Workload CJISSettings Response Input only. Immutable. Settings specific to resources needed for CJIS.
- compliance
Regime String Immutable. Compliance Regime associated with this workload.
- compliance
Status GoogleCloud Assuredworkloads V1beta1Workload Compliance Status Response Count of active Violations in the Workload.
- compliant
But List<String>Disallowed Services Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment."
- create
Time String Immutable. The Workload creation timestamp.
- display
Name String The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
- ekm
Provisioning GoogleResponse Cloud Assuredworkloads V1beta1Workload Ekm Provisioning Response Response Optional. Represents the Ekm Provisioning State of the given workload.
- enable
Sovereign BooleanControls Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
- etag String
Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
- fedramp
High GoogleSettings Cloud Assuredworkloads V1beta1Workload Fedramp High Settings Response Input only. Immutable. Settings specific to resources needed for FedRAMP High.
- fedramp
Moderate GoogleSettings Cloud Assuredworkloads V1beta1Workload Fedramp Moderate Settings Response Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
- il4Settings
Google
Cloud Assuredworkloads V1beta1Workload IL4Settings Response Input only. Immutable. Settings specific to resources needed for IL4.
- kaj
Enrollment StringState Represents the KAJ enrollment state of the given workload.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
- labels Map<String,String>
Optional. Labels applied to the workload.
- name String
Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
- partner String
Optional. Partner regime associated with this workload.
- provisioned
Resources StringParent Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
- resource
Settings List<GoogleCloud Assuredworkloads V1beta1Workload Resource Settings Response> Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
- resources
List<Google
Cloud Assuredworkloads V1beta1Workload Resource Info Response> The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
- saa
Enrollment GoogleResponse Cloud Assuredworkloads V1beta1Workload Saa Enrollment Response Response Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
- billing
Account string Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form
billingAccounts/{billing_account_id}
. For example,billingAccounts/012345-567890-ABCDEF
.- cjis
Settings GoogleCloud Assuredworkloads V1beta1Workload CJISSettings Response Input only. Immutable. Settings specific to resources needed for CJIS.
- compliance
Regime string Immutable. Compliance Regime associated with this workload.
- compliance
Status GoogleCloud Assuredworkloads V1beta1Workload Compliance Status Response Count of active Violations in the Workload.
- compliant
But string[]Disallowed Services Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment."
- create
Time string Immutable. The Workload creation timestamp.
- display
Name string The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
- ekm
Provisioning GoogleResponse Cloud Assuredworkloads V1beta1Workload Ekm Provisioning Response Response Optional. Represents the Ekm Provisioning State of the given workload.
- enable
Sovereign booleanControls Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
- etag string
Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
- fedramp
High GoogleSettings Cloud Assuredworkloads V1beta1Workload Fedramp High Settings Response Input only. Immutable. Settings specific to resources needed for FedRAMP High.
- fedramp
Moderate GoogleSettings Cloud Assuredworkloads V1beta1Workload Fedramp Moderate Settings Response Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
- il4Settings
Google
Cloud Assuredworkloads V1beta1Workload IL4Settings Response Input only. Immutable. Settings specific to resources needed for IL4.
- kaj
Enrollment stringState Represents the KAJ enrollment state of the given workload.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
- labels {[key: string]: string}
Optional. Labels applied to the workload.
- name string
Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
- partner string
Optional. Partner regime associated with this workload.
- provisioned
Resources stringParent Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
- resource
Settings GoogleCloud Assuredworkloads V1beta1Workload Resource Settings Response[] Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
- resources
Google
Cloud Assuredworkloads V1beta1Workload Resource Info Response[] The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
- saa
Enrollment GoogleResponse Cloud Assuredworkloads V1beta1Workload Saa Enrollment Response Response Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
- billing_
account str Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form
billingAccounts/{billing_account_id}
. For example,billingAccounts/012345-567890-ABCDEF
.- cjis_
settings GoogleCloud Assuredworkloads V1beta1Workload CJISSettings Response Input only. Immutable. Settings specific to resources needed for CJIS.
- compliance_
regime str Immutable. Compliance Regime associated with this workload.
- compliance_
status GoogleCloud Assuredworkloads V1beta1Workload Compliance Status Response Count of active Violations in the Workload.
- compliant_
but_ Sequence[str]disallowed_ services Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment."
- create_
time str Immutable. The Workload creation timestamp.
- display_
name str The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
- ekm_
provisioning_ Googleresponse Cloud Assuredworkloads V1beta1Workload Ekm Provisioning Response Response Optional. Represents the Ekm Provisioning State of the given workload.
- enable_
sovereign_ boolcontrols Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
- etag str
Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
- fedramp_
high_ Googlesettings Cloud Assuredworkloads V1beta1Workload Fedramp High Settings Response Input only. Immutable. Settings specific to resources needed for FedRAMP High.
- fedramp_
moderate_ Googlesettings Cloud Assuredworkloads V1beta1Workload Fedramp Moderate Settings Response Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
- il4_
settings GoogleCloud Assuredworkloads V1beta1Workload IL4Settings Response Input only. Immutable. Settings specific to resources needed for IL4.
- kaj_
enrollment_ strstate Represents the KAJ enrollment state of the given workload.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
- labels Mapping[str, str]
Optional. Labels applied to the workload.
- name str
Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
- partner str
Optional. Partner regime associated with this workload.
- provisioned_
resources_ strparent Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
- resource_
settings Sequence[GoogleCloud Assuredworkloads V1beta1Workload Resource Settings Response] Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
- resources
Sequence[Google
Cloud Assuredworkloads V1beta1Workload Resource Info Response] The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
- saa_
enrollment_ Googleresponse Cloud Assuredworkloads V1beta1Workload Saa Enrollment Response Response Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
- billing
Account String Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form
billingAccounts/{billing_account_id}
. For example,billingAccounts/012345-567890-ABCDEF
.- cjis
Settings Property Map Input only. Immutable. Settings specific to resources needed for CJIS.
- compliance
Regime String Immutable. Compliance Regime associated with this workload.
- compliance
Status Property Map Count of active Violations in the Workload.
- compliant
But List<String>Disallowed Services Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment."
- create
Time String Immutable. The Workload creation timestamp.
- display
Name String The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
- ekm
Provisioning Property MapResponse Optional. Represents the Ekm Provisioning State of the given workload.
- enable
Sovereign BooleanControls Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
- etag String
Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
- fedramp
High Property MapSettings Input only. Immutable. Settings specific to resources needed for FedRAMP High.
- fedramp
Moderate Property MapSettings Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
- il4Settings Property Map
Input only. Immutable. Settings specific to resources needed for IL4.
- kaj
Enrollment StringState Represents the KAJ enrollment state of the given workload.
- kms
Settings Property Map Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
- labels Map<String>
Optional. Labels applied to the workload.
- name String
Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
- partner String
Optional. Partner regime associated with this workload.
- provisioned
Resources StringParent Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
- resource
Settings List<Property Map> Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
- resources List<Property Map>
The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
- saa
Enrollment Property MapResponse Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
Supporting Types
GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsResponse
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings Property Map Input only. Immutable. Settings used to create a CMEK crypto key.
GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse
- Acknowledged
Violation intCount Count of active Violations which are acknowledged in the Workload.
- Active
Violation intCount Count of active Violations which haven't been acknowledged.
- Acknowledged
Violation intCount Count of active Violations which are acknowledged in the Workload.
- Active
Violation intCount Count of active Violations which haven't been acknowledged.
- acknowledged
Violation IntegerCount Count of active Violations which are acknowledged in the Workload.
- active
Violation IntegerCount Count of active Violations which haven't been acknowledged.
- acknowledged
Violation numberCount Count of active Violations which are acknowledged in the Workload.
- active
Violation numberCount Count of active Violations which haven't been acknowledged.
- acknowledged_
violation_ intcount Count of active Violations which are acknowledged in the Workload.
- active_
violation_ intcount Count of active Violations which haven't been acknowledged.
- acknowledged
Violation NumberCount Count of active Violations which are acknowledged in the Workload.
- active
Violation NumberCount Count of active Violations which haven't been acknowledged.
GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse
- Ekm
Provisioning stringError Domain Indicates Ekm provisioning error if any.
- Ekm
Provisioning stringError Message Detailed error message if Ekm provisioning fails
- Ekm
Provisioning stringState Indicates Ekm enrollment Provisioning of a given workload.
- Ekm
Provisioning stringError Domain Indicates Ekm provisioning error if any.
- Ekm
Provisioning stringError Message Detailed error message if Ekm provisioning fails
- Ekm
Provisioning stringState Indicates Ekm enrollment Provisioning of a given workload.
- ekm
Provisioning StringError Domain Indicates Ekm provisioning error if any.
- ekm
Provisioning StringError Message Detailed error message if Ekm provisioning fails
- ekm
Provisioning StringState Indicates Ekm enrollment Provisioning of a given workload.
- ekm
Provisioning stringError Domain Indicates Ekm provisioning error if any.
- ekm
Provisioning stringError Message Detailed error message if Ekm provisioning fails
- ekm
Provisioning stringState Indicates Ekm enrollment Provisioning of a given workload.
- ekm_
provisioning_ strerror_ domain Indicates Ekm provisioning error if any.
- ekm_
provisioning_ strerror_ message Detailed error message if Ekm provisioning fails
- ekm_
provisioning_ strstate Indicates Ekm enrollment Provisioning of a given workload.
- ekm
Provisioning StringError Domain Indicates Ekm provisioning error if any.
- ekm
Provisioning StringError Message Detailed error message if Ekm provisioning fails
- ekm
Provisioning StringState Indicates Ekm enrollment Provisioning of a given workload.
GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsResponse
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings Property Map Input only. Immutable. Settings used to create a CMEK crypto key.
GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsResponse
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings Property Map Input only. Immutable. Settings used to create a CMEK crypto key.
GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsResponse
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings Property Map Input only. Immutable. Settings used to create a CMEK crypto key.
GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
- Next
Rotation stringTime Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- Rotation
Period string Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- Next
Rotation stringTime Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- Rotation
Period string Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- next
Rotation StringTime Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- rotation
Period String Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- next
Rotation stringTime Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- rotation
Period string Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- next_
rotation_ strtime Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- rotation_
period str Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- next
Rotation StringTime Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- rotation
Period String Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse
- Resource
Id string Resource identifier. For a project this represents project_number.
- Resource
Type string Indicates the type of resource.
- Resource
Id string Resource identifier. For a project this represents project_number.
- Resource
Type string Indicates the type of resource.
- resource
Id String Resource identifier. For a project this represents project_number.
- resource
Type String Indicates the type of resource.
- resource
Id string Resource identifier. For a project this represents project_number.
- resource
Type string Indicates the type of resource.
- resource_
id str Resource identifier. For a project this represents project_number.
- resource_
type str Indicates the type of resource.
- resource
Id String Resource identifier. For a project this represents project_number.
- resource
Type String Indicates the type of resource.
GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResponse
- Display
Name string User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- Resource
Id string Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- Resource
Type string Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- Display
Name string User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- Resource
Id string Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- Resource
Type string Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- display
Name String User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- resource
Id String Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- resource
Type String Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- display
Name string User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- resource
Id string Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- resource
Type string Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- display_
name str User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- resource_
id str Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- resource_
type str Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- display
Name String User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- resource
Id String Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- resource
Type String Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse
- Setup
Errors List<string> Indicates SAA enrollment setup error if any.
- Setup
Status string Indicates SAA enrollment status of a given workload.
- Setup
Errors []string Indicates SAA enrollment setup error if any.
- Setup
Status string Indicates SAA enrollment status of a given workload.
- setup
Errors List<String> Indicates SAA enrollment setup error if any.
- setup
Status String Indicates SAA enrollment status of a given workload.
- setup
Errors string[] Indicates SAA enrollment setup error if any.
- setup
Status string Indicates SAA enrollment status of a given workload.
- setup_
errors Sequence[str] Indicates SAA enrollment setup error if any.
- setup_
status str Indicates SAA enrollment status of a given workload.
- setup
Errors List<String> Indicates SAA enrollment setup error if any.
- setup
Status String Indicates SAA enrollment status of a given workload.
Package Details
- Repository
- Google Cloud Native pulumi/pulumi-google-native
- License
- Apache-2.0