lacework.ReportRule
Explore with Pulumi AI
Use this resource to create a Lacework Report Rule in order to route reports to one or more email alert channels. For more information, see the Report Rules documentation.
Example Usage
Create ReportRule Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ReportRule(name: string, args: ReportRuleArgs, opts?: CustomResourceOptions);
@overload
def ReportRule(resource_name: str,
args: ReportRuleArgs,
opts: Optional[ResourceOptions] = None)
@overload
def ReportRule(resource_name: str,
opts: Optional[ResourceOptions] = None,
email_alert_channels: Optional[Sequence[str]] = None,
severities: Optional[Sequence[str]] = None,
aws_compliance_reports: Optional[ReportRuleAwsComplianceReportsArgs] = None,
azure_compliance_reports: Optional[ReportRuleAzureComplianceReportsArgs] = None,
daily_compliance_reports: Optional[ReportRuleDailyComplianceReportsArgs] = None,
description: Optional[str] = None,
enabled: Optional[bool] = None,
gcp_compliance_reports: Optional[ReportRuleGcpComplianceReportsArgs] = None,
name: Optional[str] = None,
report_rule_id: Optional[str] = None,
resource_groups: Optional[Sequence[str]] = None,
weekly_snapshot: Optional[bool] = None)
func NewReportRule(ctx *Context, name string, args ReportRuleArgs, opts ...ResourceOption) (*ReportRule, error)
public ReportRule(string name, ReportRuleArgs args, CustomResourceOptions? opts = null)
public ReportRule(String name, ReportRuleArgs args)
public ReportRule(String name, ReportRuleArgs args, CustomResourceOptions options)
type: lacework:ReportRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ReportRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ReportRuleArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ReportRuleArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ReportRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ReportRuleArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var reportRuleResource = new Lacework.ReportRule("reportRuleResource", new()
{
EmailAlertChannels = new[]
{
"string",
},
Severities = new[]
{
"string",
},
AwsComplianceReports = new Lacework.Inputs.ReportRuleAwsComplianceReportsArgs
{
CisS3 = false,
Hipaa = false,
Iso2700 = false,
Nist800171Rev2 = false,
Nist80053Rev4 = false,
Pci = false,
Soc = false,
SocRev2 = false,
},
AzureComplianceReports = new Lacework.Inputs.ReportRuleAzureComplianceReportsArgs
{
Cis = false,
Cis131 = false,
Pci = false,
Soc = false,
},
DailyComplianceReports = new Lacework.Inputs.ReportRuleDailyComplianceReportsArgs
{
AwsCloudtrail = false,
AwsCompliance = false,
AzureActivityLog = false,
AzureCompliance = false,
GcpAuditTrail = false,
GcpCompliance = false,
HostSecurity = false,
OpenshiftCompliance = false,
OpenshiftComplianceEvents = false,
Platform = false,
},
Description = "string",
Enabled = false,
GcpComplianceReports = new Lacework.Inputs.ReportRuleGcpComplianceReportsArgs
{
Cis = false,
Cis12 = false,
Hipaa = false,
HipaaRev2 = false,
Iso27001 = false,
K8s = false,
Pci = false,
PciRev2 = false,
Soc = false,
SocRev2 = false,
},
Name = "string",
ReportRuleId = "string",
ResourceGroups = new[]
{
"string",
},
WeeklySnapshot = false,
});
example, err := lacework.NewReportRule(ctx, "reportRuleResource", &lacework.ReportRuleArgs{
EmailAlertChannels: pulumi.StringArray{
pulumi.String("string"),
},
Severities: pulumi.StringArray{
pulumi.String("string"),
},
AwsComplianceReports: &lacework.ReportRuleAwsComplianceReportsArgs{
CisS3: pulumi.Bool(false),
Hipaa: pulumi.Bool(false),
Iso2700: pulumi.Bool(false),
Nist800171Rev2: pulumi.Bool(false),
Nist80053Rev4: pulumi.Bool(false),
Pci: pulumi.Bool(false),
Soc: pulumi.Bool(false),
SocRev2: pulumi.Bool(false),
},
AzureComplianceReports: &lacework.ReportRuleAzureComplianceReportsArgs{
Cis: pulumi.Bool(false),
Cis131: pulumi.Bool(false),
Pci: pulumi.Bool(false),
Soc: pulumi.Bool(false),
},
DailyComplianceReports: &lacework.ReportRuleDailyComplianceReportsArgs{
AwsCloudtrail: pulumi.Bool(false),
AwsCompliance: pulumi.Bool(false),
AzureActivityLog: pulumi.Bool(false),
AzureCompliance: pulumi.Bool(false),
GcpAuditTrail: pulumi.Bool(false),
GcpCompliance: pulumi.Bool(false),
HostSecurity: pulumi.Bool(false),
OpenshiftCompliance: pulumi.Bool(false),
OpenshiftComplianceEvents: pulumi.Bool(false),
Platform: pulumi.Bool(false),
},
Description: pulumi.String("string"),
Enabled: pulumi.Bool(false),
GcpComplianceReports: &lacework.ReportRuleGcpComplianceReportsArgs{
Cis: pulumi.Bool(false),
Cis12: pulumi.Bool(false),
Hipaa: pulumi.Bool(false),
HipaaRev2: pulumi.Bool(false),
Iso27001: pulumi.Bool(false),
K8s: pulumi.Bool(false),
Pci: pulumi.Bool(false),
PciRev2: pulumi.Bool(false),
Soc: pulumi.Bool(false),
SocRev2: pulumi.Bool(false),
},
Name: pulumi.String("string"),
ReportRuleId: pulumi.String("string"),
ResourceGroups: pulumi.StringArray{
pulumi.String("string"),
},
WeeklySnapshot: pulumi.Bool(false),
})
var reportRuleResource = new ReportRule("reportRuleResource", ReportRuleArgs.builder()
.emailAlertChannels("string")
.severities("string")
.awsComplianceReports(ReportRuleAwsComplianceReportsArgs.builder()
.cisS3(false)
.hipaa(false)
.iso2700(false)
.nist800171Rev2(false)
.nist80053Rev4(false)
.pci(false)
.soc(false)
.socRev2(false)
.build())
.azureComplianceReports(ReportRuleAzureComplianceReportsArgs.builder()
.cis(false)
.cis131(false)
.pci(false)
.soc(false)
.build())
.dailyComplianceReports(ReportRuleDailyComplianceReportsArgs.builder()
.awsCloudtrail(false)
.awsCompliance(false)
.azureActivityLog(false)
.azureCompliance(false)
.gcpAuditTrail(false)
.gcpCompliance(false)
.hostSecurity(false)
.openshiftCompliance(false)
.openshiftComplianceEvents(false)
.platform(false)
.build())
.description("string")
.enabled(false)
.gcpComplianceReports(ReportRuleGcpComplianceReportsArgs.builder()
.cis(false)
.cis12(false)
.hipaa(false)
.hipaaRev2(false)
.iso27001(false)
.k8s(false)
.pci(false)
.pciRev2(false)
.soc(false)
.socRev2(false)
.build())
.name("string")
.reportRuleId("string")
.resourceGroups("string")
.weeklySnapshot(false)
.build());
report_rule_resource = lacework.ReportRule("reportRuleResource",
email_alert_channels=["string"],
severities=["string"],
aws_compliance_reports={
"cis_s3": False,
"hipaa": False,
"iso2700": False,
"nist800171_rev2": False,
"nist80053_rev4": False,
"pci": False,
"soc": False,
"soc_rev2": False,
},
azure_compliance_reports={
"cis": False,
"cis131": False,
"pci": False,
"soc": False,
},
daily_compliance_reports={
"aws_cloudtrail": False,
"aws_compliance": False,
"azure_activity_log": False,
"azure_compliance": False,
"gcp_audit_trail": False,
"gcp_compliance": False,
"host_security": False,
"openshift_compliance": False,
"openshift_compliance_events": False,
"platform": False,
},
description="string",
enabled=False,
gcp_compliance_reports={
"cis": False,
"cis12": False,
"hipaa": False,
"hipaa_rev2": False,
"iso27001": False,
"k8s": False,
"pci": False,
"pci_rev2": False,
"soc": False,
"soc_rev2": False,
},
name="string",
report_rule_id="string",
resource_groups=["string"],
weekly_snapshot=False)
const reportRuleResource = new lacework.ReportRule("reportRuleResource", {
emailAlertChannels: ["string"],
severities: ["string"],
awsComplianceReports: {
cisS3: false,
hipaa: false,
iso2700: false,
nist800171Rev2: false,
nist80053Rev4: false,
pci: false,
soc: false,
socRev2: false,
},
azureComplianceReports: {
cis: false,
cis131: false,
pci: false,
soc: false,
},
dailyComplianceReports: {
awsCloudtrail: false,
awsCompliance: false,
azureActivityLog: false,
azureCompliance: false,
gcpAuditTrail: false,
gcpCompliance: false,
hostSecurity: false,
openshiftCompliance: false,
openshiftComplianceEvents: false,
platform: false,
},
description: "string",
enabled: false,
gcpComplianceReports: {
cis: false,
cis12: false,
hipaa: false,
hipaaRev2: false,
iso27001: false,
k8s: false,
pci: false,
pciRev2: false,
soc: false,
socRev2: false,
},
name: "string",
reportRuleId: "string",
resourceGroups: ["string"],
weeklySnapshot: false,
});
type: lacework:ReportRule
properties:
awsComplianceReports:
cisS3: false
hipaa: false
iso2700: false
nist80053Rev4: false
nist800171Rev2: false
pci: false
soc: false
socRev2: false
azureComplianceReports:
cis: false
cis131: false
pci: false
soc: false
dailyComplianceReports:
awsCloudtrail: false
awsCompliance: false
azureActivityLog: false
azureCompliance: false
gcpAuditTrail: false
gcpCompliance: false
hostSecurity: false
openshiftCompliance: false
openshiftComplianceEvents: false
platform: false
description: string
emailAlertChannels:
- string
enabled: false
gcpComplianceReports:
cis: false
cis12: false
hipaa: false
hipaaRev2: false
iso27001: false
k8s: false
pci: false
pciRev2: false
soc: false
socRev2: false
name: string
reportRuleId: string
resourceGroups:
- string
severities:
- string
weeklySnapshot: false
ReportRule Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The ReportRule resource accepts the following input properties:
- Email
Alert List<string>Channels - The list of email alert channels for the rule to use.
- Severities List<string>
- The list of the severities that the rule will apply. Valid severities include:
Critical
,High
,Medium
,Low
andInfo
. - Aws
Compliance ReportReports Rule Aws Compliance Reports - Compliance reports for Aws. See Aws Compliance Reports below for details.
- Azure
Compliance ReportReports Rule Azure Compliance Reports - Compliance reports for Azure. See Azure Compliance Reports below for details.
- Daily
Compliance ReportReports Rule Daily Compliance Reports - Daily event summary reports. See Daily Compliance Reports below for details.
- Description string
- The description of the report rule.
- Enabled bool
- The state of the external integration. Defaults to
true
. - Gcp
Compliance ReportReports Rule Gcp Compliance Reports - Compliance reports for Gcp. See Gcp Compliance Reports below for details.
- Name string
- The report rule name.
- Report
Rule stringId - Resource
Groups List<string> - The list of resource groups the rule will apply to.
- Weekly
Snapshot bool - A weekly compliance trend report for all monitored resources. Defaults to
false
.
- Email
Alert []stringChannels - The list of email alert channels for the rule to use.
- Severities []string
- The list of the severities that the rule will apply. Valid severities include:
Critical
,High
,Medium
,Low
andInfo
. - Aws
Compliance ReportReports Rule Aws Compliance Reports Args - Compliance reports for Aws. See Aws Compliance Reports below for details.
- Azure
Compliance ReportReports Rule Azure Compliance Reports Args - Compliance reports for Azure. See Azure Compliance Reports below for details.
- Daily
Compliance ReportReports Rule Daily Compliance Reports Args - Daily event summary reports. See Daily Compliance Reports below for details.
- Description string
- The description of the report rule.
- Enabled bool
- The state of the external integration. Defaults to
true
. - Gcp
Compliance ReportReports Rule Gcp Compliance Reports Args - Compliance reports for Gcp. See Gcp Compliance Reports below for details.
- Name string
- The report rule name.
- Report
Rule stringId - Resource
Groups []string - The list of resource groups the rule will apply to.
- Weekly
Snapshot bool - A weekly compliance trend report for all monitored resources. Defaults to
false
.
- email
Alert List<String>Channels - The list of email alert channels for the rule to use.
- severities List<String>
- The list of the severities that the rule will apply. Valid severities include:
Critical
,High
,Medium
,Low
andInfo
. - aws
Compliance ReportReports Rule Aws Compliance Reports - Compliance reports for Aws. See Aws Compliance Reports below for details.
- azure
Compliance ReportReports Rule Azure Compliance Reports - Compliance reports for Azure. See Azure Compliance Reports below for details.
- daily
Compliance ReportReports Rule Daily Compliance Reports - Daily event summary reports. See Daily Compliance Reports below for details.
- description String
- The description of the report rule.
- enabled Boolean
- The state of the external integration. Defaults to
true
. - gcp
Compliance ReportReports Rule Gcp Compliance Reports - Compliance reports for Gcp. See Gcp Compliance Reports below for details.
- name String
- The report rule name.
- report
Rule StringId - resource
Groups List<String> - The list of resource groups the rule will apply to.
- weekly
Snapshot Boolean - A weekly compliance trend report for all monitored resources. Defaults to
false
.
- email
Alert string[]Channels - The list of email alert channels for the rule to use.
- severities string[]
- The list of the severities that the rule will apply. Valid severities include:
Critical
,High
,Medium
,Low
andInfo
. - aws
Compliance ReportReports Rule Aws Compliance Reports - Compliance reports for Aws. See Aws Compliance Reports below for details.
- azure
Compliance ReportReports Rule Azure Compliance Reports - Compliance reports for Azure. See Azure Compliance Reports below for details.
- daily
Compliance ReportReports Rule Daily Compliance Reports - Daily event summary reports. See Daily Compliance Reports below for details.
- description string
- The description of the report rule.
- enabled boolean
- The state of the external integration. Defaults to
true
. - gcp
Compliance ReportReports Rule Gcp Compliance Reports - Compliance reports for Gcp. See Gcp Compliance Reports below for details.
- name string
- The report rule name.
- report
Rule stringId - resource
Groups string[] - The list of resource groups the rule will apply to.
- weekly
Snapshot boolean - A weekly compliance trend report for all monitored resources. Defaults to
false
.
- email_
alert_ Sequence[str]channels - The list of email alert channels for the rule to use.
- severities Sequence[str]
- The list of the severities that the rule will apply. Valid severities include:
Critical
,High
,Medium
,Low
andInfo
. - aws_
compliance_ Reportreports Rule Aws Compliance Reports Args - Compliance reports for Aws. See Aws Compliance Reports below for details.
- azure_
compliance_ Reportreports Rule Azure Compliance Reports Args - Compliance reports for Azure. See Azure Compliance Reports below for details.
- daily_
compliance_ Reportreports Rule Daily Compliance Reports Args - Daily event summary reports. See Daily Compliance Reports below for details.
- description str
- The description of the report rule.
- enabled bool
- The state of the external integration. Defaults to
true
. - gcp_
compliance_ Reportreports Rule Gcp Compliance Reports Args - Compliance reports for Gcp. See Gcp Compliance Reports below for details.
- name str
- The report rule name.
- report_
rule_ strid - resource_
groups Sequence[str] - The list of resource groups the rule will apply to.
- weekly_
snapshot bool - A weekly compliance trend report for all monitored resources. Defaults to
false
.
- email
Alert List<String>Channels - The list of email alert channels for the rule to use.
- severities List<String>
- The list of the severities that the rule will apply. Valid severities include:
Critical
,High
,Medium
,Low
andInfo
. - aws
Compliance Property MapReports - Compliance reports for Aws. See Aws Compliance Reports below for details.
- azure
Compliance Property MapReports - Compliance reports for Azure. See Azure Compliance Reports below for details.
- daily
Compliance Property MapReports - Daily event summary reports. See Daily Compliance Reports below for details.
- description String
- The description of the report rule.
- enabled Boolean
- The state of the external integration. Defaults to
true
. - gcp
Compliance Property MapReports - Compliance reports for Gcp. See Gcp Compliance Reports below for details.
- name String
- The report rule name.
- report
Rule StringId - resource
Groups List<String> - The list of resource groups the rule will apply to.
- weekly
Snapshot Boolean - A weekly compliance trend report for all monitored resources. Defaults to
false
.
Outputs
All input properties are implicitly available as output properties. Additionally, the ReportRule resource produces the following output properties:
- Created
Or stringUpdated By - Created
Or stringUpdated Time - Guid string
- Id string
- The provider-assigned unique ID for this managed resource.
- Type string
- Created
Or stringUpdated By - Created
Or stringUpdated Time - Guid string
- Id string
- The provider-assigned unique ID for this managed resource.
- Type string
- created
Or StringUpdated By - created
Or StringUpdated Time - guid String
- id String
- The provider-assigned unique ID for this managed resource.
- type String
- created
Or stringUpdated By - created
Or stringUpdated Time - guid string
- id string
- The provider-assigned unique ID for this managed resource.
- type string
- created_
or_ strupdated_ by - created_
or_ strupdated_ time - guid str
- id str
- The provider-assigned unique ID for this managed resource.
- type str
- created
Or StringUpdated By - created
Or StringUpdated Time - guid String
- id String
- The provider-assigned unique ID for this managed resource.
- type String
Look up Existing ReportRule Resource
Get an existing ReportRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ReportRuleState, opts?: CustomResourceOptions): ReportRule
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
aws_compliance_reports: Optional[ReportRuleAwsComplianceReportsArgs] = None,
azure_compliance_reports: Optional[ReportRuleAzureComplianceReportsArgs] = None,
created_or_updated_by: Optional[str] = None,
created_or_updated_time: Optional[str] = None,
daily_compliance_reports: Optional[ReportRuleDailyComplianceReportsArgs] = None,
description: Optional[str] = None,
email_alert_channels: Optional[Sequence[str]] = None,
enabled: Optional[bool] = None,
gcp_compliance_reports: Optional[ReportRuleGcpComplianceReportsArgs] = None,
guid: Optional[str] = None,
name: Optional[str] = None,
report_rule_id: Optional[str] = None,
resource_groups: Optional[Sequence[str]] = None,
severities: Optional[Sequence[str]] = None,
type: Optional[str] = None,
weekly_snapshot: Optional[bool] = None) -> ReportRule
func GetReportRule(ctx *Context, name string, id IDInput, state *ReportRuleState, opts ...ResourceOption) (*ReportRule, error)
public static ReportRule Get(string name, Input<string> id, ReportRuleState? state, CustomResourceOptions? opts = null)
public static ReportRule get(String name, Output<String> id, ReportRuleState state, CustomResourceOptions options)
resources: _: type: lacework:ReportRule get: id: ${id}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Aws
Compliance ReportReports Rule Aws Compliance Reports - Compliance reports for Aws. See Aws Compliance Reports below for details.
- Azure
Compliance ReportReports Rule Azure Compliance Reports - Compliance reports for Azure. See Azure Compliance Reports below for details.
- Created
Or stringUpdated By - Created
Or stringUpdated Time - Daily
Compliance ReportReports Rule Daily Compliance Reports - Daily event summary reports. See Daily Compliance Reports below for details.
- Description string
- The description of the report rule.
- Email
Alert List<string>Channels - The list of email alert channels for the rule to use.
- Enabled bool
- The state of the external integration. Defaults to
true
. - Gcp
Compliance ReportReports Rule Gcp Compliance Reports - Compliance reports for Gcp. See Gcp Compliance Reports below for details.
- Guid string
- Name string
- The report rule name.
- Report
Rule stringId - Resource
Groups List<string> - The list of resource groups the rule will apply to.
- Severities List<string>
- The list of the severities that the rule will apply. Valid severities include:
Critical
,High
,Medium
,Low
andInfo
. - Type string
- Weekly
Snapshot bool - A weekly compliance trend report for all monitored resources. Defaults to
false
.
- Aws
Compliance ReportReports Rule Aws Compliance Reports Args - Compliance reports for Aws. See Aws Compliance Reports below for details.
- Azure
Compliance ReportReports Rule Azure Compliance Reports Args - Compliance reports for Azure. See Azure Compliance Reports below for details.
- Created
Or stringUpdated By - Created
Or stringUpdated Time - Daily
Compliance ReportReports Rule Daily Compliance Reports Args - Daily event summary reports. See Daily Compliance Reports below for details.
- Description string
- The description of the report rule.
- Email
Alert []stringChannels - The list of email alert channels for the rule to use.
- Enabled bool
- The state of the external integration. Defaults to
true
. - Gcp
Compliance ReportReports Rule Gcp Compliance Reports Args - Compliance reports for Gcp. See Gcp Compliance Reports below for details.
- Guid string
- Name string
- The report rule name.
- Report
Rule stringId - Resource
Groups []string - The list of resource groups the rule will apply to.
- Severities []string
- The list of the severities that the rule will apply. Valid severities include:
Critical
,High
,Medium
,Low
andInfo
. - Type string
- Weekly
Snapshot bool - A weekly compliance trend report for all monitored resources. Defaults to
false
.
- aws
Compliance ReportReports Rule Aws Compliance Reports - Compliance reports for Aws. See Aws Compliance Reports below for details.
- azure
Compliance ReportReports Rule Azure Compliance Reports - Compliance reports for Azure. See Azure Compliance Reports below for details.
- created
Or StringUpdated By - created
Or StringUpdated Time - daily
Compliance ReportReports Rule Daily Compliance Reports - Daily event summary reports. See Daily Compliance Reports below for details.
- description String
- The description of the report rule.
- email
Alert List<String>Channels - The list of email alert channels for the rule to use.
- enabled Boolean
- The state of the external integration. Defaults to
true
. - gcp
Compliance ReportReports Rule Gcp Compliance Reports - Compliance reports for Gcp. See Gcp Compliance Reports below for details.
- guid String
- name String
- The report rule name.
- report
Rule StringId - resource
Groups List<String> - The list of resource groups the rule will apply to.
- severities List<String>
- The list of the severities that the rule will apply. Valid severities include:
Critical
,High
,Medium
,Low
andInfo
. - type String
- weekly
Snapshot Boolean - A weekly compliance trend report for all monitored resources. Defaults to
false
.
- aws
Compliance ReportReports Rule Aws Compliance Reports - Compliance reports for Aws. See Aws Compliance Reports below for details.
- azure
Compliance ReportReports Rule Azure Compliance Reports - Compliance reports for Azure. See Azure Compliance Reports below for details.
- created
Or stringUpdated By - created
Or stringUpdated Time - daily
Compliance ReportReports Rule Daily Compliance Reports - Daily event summary reports. See Daily Compliance Reports below for details.
- description string
- The description of the report rule.
- email
Alert string[]Channels - The list of email alert channels for the rule to use.
- enabled boolean
- The state of the external integration. Defaults to
true
. - gcp
Compliance ReportReports Rule Gcp Compliance Reports - Compliance reports for Gcp. See Gcp Compliance Reports below for details.
- guid string
- name string
- The report rule name.
- report
Rule stringId - resource
Groups string[] - The list of resource groups the rule will apply to.
- severities string[]
- The list of the severities that the rule will apply. Valid severities include:
Critical
,High
,Medium
,Low
andInfo
. - type string
- weekly
Snapshot boolean - A weekly compliance trend report for all monitored resources. Defaults to
false
.
- aws_
compliance_ Reportreports Rule Aws Compliance Reports Args - Compliance reports for Aws. See Aws Compliance Reports below for details.
- azure_
compliance_ Reportreports Rule Azure Compliance Reports Args - Compliance reports for Azure. See Azure Compliance Reports below for details.
- created_
or_ strupdated_ by - created_
or_ strupdated_ time - daily_
compliance_ Reportreports Rule Daily Compliance Reports Args - Daily event summary reports. See Daily Compliance Reports below for details.
- description str
- The description of the report rule.
- email_
alert_ Sequence[str]channels - The list of email alert channels for the rule to use.
- enabled bool
- The state of the external integration. Defaults to
true
. - gcp_
compliance_ Reportreports Rule Gcp Compliance Reports Args - Compliance reports for Gcp. See Gcp Compliance Reports below for details.
- guid str
- name str
- The report rule name.
- report_
rule_ strid - resource_
groups Sequence[str] - The list of resource groups the rule will apply to.
- severities Sequence[str]
- The list of the severities that the rule will apply. Valid severities include:
Critical
,High
,Medium
,Low
andInfo
. - type str
- weekly_
snapshot bool - A weekly compliance trend report for all monitored resources. Defaults to
false
.
- aws
Compliance Property MapReports - Compliance reports for Aws. See Aws Compliance Reports below for details.
- azure
Compliance Property MapReports - Compliance reports for Azure. See Azure Compliance Reports below for details.
- created
Or StringUpdated By - created
Or StringUpdated Time - daily
Compliance Property MapReports - Daily event summary reports. See Daily Compliance Reports below for details.
- description String
- The description of the report rule.
- email
Alert List<String>Channels - The list of email alert channels for the rule to use.
- enabled Boolean
- The state of the external integration. Defaults to
true
. - gcp
Compliance Property MapReports - Compliance reports for Gcp. See Gcp Compliance Reports below for details.
- guid String
- name String
- The report rule name.
- report
Rule StringId - resource
Groups List<String> - The list of resource groups the rule will apply to.
- severities List<String>
- The list of the severities that the rule will apply. Valid severities include:
Critical
,High
,Medium
,Low
andInfo
. - type String
- weekly
Snapshot Boolean - A weekly compliance trend report for all monitored resources. Defaults to
false
.
Supporting Types
ReportRuleAwsComplianceReports, ReportRuleAwsComplianceReportsArgs
- Cis
S3 bool - AWS CIS Benchmark and S3 Report. Defaults to
false
. - Hipaa bool
- AWS HIPAA Report. Defaults to
false
. - Iso2700 bool
- AWS ISO 27001:2013 Report. Defaults to
false
. - Nist800171Rev2 bool
- AWS NIST 800-171 Report. Defaults to
false
. - Nist80053Rev4 bool
- AWS NIST 800-53 Report. Defaults to
false
. - Pci bool
- AWS PCI DSS Report. Defaults to
false
. - Soc bool
- AWS SOC 2 Report. Defaults to
false
. - Soc
Rev2 bool - AWS SOC 2 Report Rev2. Defaults to
false
.
- Cis
S3 bool - AWS CIS Benchmark and S3 Report. Defaults to
false
. - Hipaa bool
- AWS HIPAA Report. Defaults to
false
. - Iso2700 bool
- AWS ISO 27001:2013 Report. Defaults to
false
. - Nist800171Rev2 bool
- AWS NIST 800-171 Report. Defaults to
false
. - Nist80053Rev4 bool
- AWS NIST 800-53 Report. Defaults to
false
. - Pci bool
- AWS PCI DSS Report. Defaults to
false
. - Soc bool
- AWS SOC 2 Report. Defaults to
false
. - Soc
Rev2 bool - AWS SOC 2 Report Rev2. Defaults to
false
.
- cis
S3 Boolean - AWS CIS Benchmark and S3 Report. Defaults to
false
. - hipaa Boolean
- AWS HIPAA Report. Defaults to
false
. - iso2700 Boolean
- AWS ISO 27001:2013 Report. Defaults to
false
. - nist800171Rev2 Boolean
- AWS NIST 800-171 Report. Defaults to
false
. - nist80053Rev4 Boolean
- AWS NIST 800-53 Report. Defaults to
false
. - pci Boolean
- AWS PCI DSS Report. Defaults to
false
. - soc Boolean
- AWS SOC 2 Report. Defaults to
false
. - soc
Rev2 Boolean - AWS SOC 2 Report Rev2. Defaults to
false
.
- cis
S3 boolean - AWS CIS Benchmark and S3 Report. Defaults to
false
. - hipaa boolean
- AWS HIPAA Report. Defaults to
false
. - iso2700 boolean
- AWS ISO 27001:2013 Report. Defaults to
false
. - nist800171Rev2 boolean
- AWS NIST 800-171 Report. Defaults to
false
. - nist80053Rev4 boolean
- AWS NIST 800-53 Report. Defaults to
false
. - pci boolean
- AWS PCI DSS Report. Defaults to
false
. - soc boolean
- AWS SOC 2 Report. Defaults to
false
. - soc
Rev2 boolean - AWS SOC 2 Report Rev2. Defaults to
false
.
- cis_
s3 bool - AWS CIS Benchmark and S3 Report. Defaults to
false
. - hipaa bool
- AWS HIPAA Report. Defaults to
false
. - iso2700 bool
- AWS ISO 27001:2013 Report. Defaults to
false
. - nist800171_
rev2 bool - AWS NIST 800-171 Report. Defaults to
false
. - nist80053_
rev4 bool - AWS NIST 800-53 Report. Defaults to
false
. - pci bool
- AWS PCI DSS Report. Defaults to
false
. - soc bool
- AWS SOC 2 Report. Defaults to
false
. - soc_
rev2 bool - AWS SOC 2 Report Rev2. Defaults to
false
.
- cis
S3 Boolean - AWS CIS Benchmark and S3 Report. Defaults to
false
. - hipaa Boolean
- AWS HIPAA Report. Defaults to
false
. - iso2700 Boolean
- AWS ISO 27001:2013 Report. Defaults to
false
. - nist800171Rev2 Boolean
- AWS NIST 800-171 Report. Defaults to
false
. - nist80053Rev4 Boolean
- AWS NIST 800-53 Report. Defaults to
false
. - pci Boolean
- AWS PCI DSS Report. Defaults to
false
. - soc Boolean
- AWS SOC 2 Report. Defaults to
false
. - soc
Rev2 Boolean - AWS SOC 2 Report Rev2. Defaults to
false
.
ReportRuleAzureComplianceReports, ReportRuleAzureComplianceReportsArgs
ReportRuleDailyComplianceReports, ReportRuleDailyComplianceReportsArgs
- Aws
Cloudtrail bool - AWS CloudTrail. Defaults to
false
. - Aws
Compliance bool - AWS Compliance. Defaults to
false
. - Azure
Activity boolLog - Azure Activity Log. Defaults to
false
. - Azure
Compliance bool - Gcp
Audit boolTrail - GCP Audit Trail. Defaults to
false
. - Gcp
Compliance bool - GCP Compliance. Defaults to
false
. - Host
Security bool - Host Security. Defaults to
false
. - Openshift
Compliance bool - Openshift Compliance (Optional) Defaults to
false
. - Openshift
Compliance boolEvents - Openshift Compliance Events (Optional) Defaults to
false
. - Platform bool
- Platform Events. Defaults to
false
.
- Aws
Cloudtrail bool - AWS CloudTrail. Defaults to
false
. - Aws
Compliance bool - AWS Compliance. Defaults to
false
. - Azure
Activity boolLog - Azure Activity Log. Defaults to
false
. - Azure
Compliance bool - Gcp
Audit boolTrail - GCP Audit Trail. Defaults to
false
. - Gcp
Compliance bool - GCP Compliance. Defaults to
false
. - Host
Security bool - Host Security. Defaults to
false
. - Openshift
Compliance bool - Openshift Compliance (Optional) Defaults to
false
. - Openshift
Compliance boolEvents - Openshift Compliance Events (Optional) Defaults to
false
. - Platform bool
- Platform Events. Defaults to
false
.
- aws
Cloudtrail Boolean - AWS CloudTrail. Defaults to
false
. - aws
Compliance Boolean - AWS Compliance. Defaults to
false
. - azure
Activity BooleanLog - Azure Activity Log. Defaults to
false
. - azure
Compliance Boolean - gcp
Audit BooleanTrail - GCP Audit Trail. Defaults to
false
. - gcp
Compliance Boolean - GCP Compliance. Defaults to
false
. - host
Security Boolean - Host Security. Defaults to
false
. - openshift
Compliance Boolean - Openshift Compliance (Optional) Defaults to
false
. - openshift
Compliance BooleanEvents - Openshift Compliance Events (Optional) Defaults to
false
. - platform Boolean
- Platform Events. Defaults to
false
.
- aws
Cloudtrail boolean - AWS CloudTrail. Defaults to
false
. - aws
Compliance boolean - AWS Compliance. Defaults to
false
. - azure
Activity booleanLog - Azure Activity Log. Defaults to
false
. - azure
Compliance boolean - gcp
Audit booleanTrail - GCP Audit Trail. Defaults to
false
. - gcp
Compliance boolean - GCP Compliance. Defaults to
false
. - host
Security boolean - Host Security. Defaults to
false
. - openshift
Compliance boolean - Openshift Compliance (Optional) Defaults to
false
. - openshift
Compliance booleanEvents - Openshift Compliance Events (Optional) Defaults to
false
. - platform boolean
- Platform Events. Defaults to
false
.
- aws_
cloudtrail bool - AWS CloudTrail. Defaults to
false
. - aws_
compliance bool - AWS Compliance. Defaults to
false
. - azure_
activity_ boollog - Azure Activity Log. Defaults to
false
. - azure_
compliance bool - gcp_
audit_ booltrail - GCP Audit Trail. Defaults to
false
. - gcp_
compliance bool - GCP Compliance. Defaults to
false
. - host_
security bool - Host Security. Defaults to
false
. - openshift_
compliance bool - Openshift Compliance (Optional) Defaults to
false
. - openshift_
compliance_ boolevents - Openshift Compliance Events (Optional) Defaults to
false
. - platform bool
- Platform Events. Defaults to
false
.
- aws
Cloudtrail Boolean - AWS CloudTrail. Defaults to
false
. - aws
Compliance Boolean - AWS Compliance. Defaults to
false
. - azure
Activity BooleanLog - Azure Activity Log. Defaults to
false
. - azure
Compliance Boolean - gcp
Audit BooleanTrail - GCP Audit Trail. Defaults to
false
. - gcp
Compliance Boolean - GCP Compliance. Defaults to
false
. - host
Security Boolean - Host Security. Defaults to
false
. - openshift
Compliance Boolean - Openshift Compliance (Optional) Defaults to
false
. - openshift
Compliance BooleanEvents - Openshift Compliance Events (Optional) Defaults to
false
. - platform Boolean
- Platform Events. Defaults to
false
.
ReportRuleGcpComplianceReports, ReportRuleGcpComplianceReportsArgs
- Cis bool
- GCP CIS Benchmark. Defaults to
false
. - Cis12 bool
- GCP CIS 1.2 Benchmark. Defaults to
false
. - Hipaa bool
- GCP HIPAA Report. Defaults to
false
. - Hipaa
Rev2 bool - GCP HIPAA Report Rev2. Defaults to
false
. - Iso27001 bool
- GCP ISO 27001 Report. Defaults to
false
. - K8s bool
- GCP K8S Benchmark. Defaults to
false
. - Pci bool
- GCP PCI Benchmark. Defaults to
false
. - Pci
Rev2 bool - GCP PCI Benchmark Rev2. Defaults to
false
. - Soc bool
- GCP SOC 2 Report. Defaults to
false
. - Soc
Rev2 bool - GCP SOC 2 Report Rev2. Defaults to
false
.
- Cis bool
- GCP CIS Benchmark. Defaults to
false
. - Cis12 bool
- GCP CIS 1.2 Benchmark. Defaults to
false
. - Hipaa bool
- GCP HIPAA Report. Defaults to
false
. - Hipaa
Rev2 bool - GCP HIPAA Report Rev2. Defaults to
false
. - Iso27001 bool
- GCP ISO 27001 Report. Defaults to
false
. - K8s bool
- GCP K8S Benchmark. Defaults to
false
. - Pci bool
- GCP PCI Benchmark. Defaults to
false
. - Pci
Rev2 bool - GCP PCI Benchmark Rev2. Defaults to
false
. - Soc bool
- GCP SOC 2 Report. Defaults to
false
. - Soc
Rev2 bool - GCP SOC 2 Report Rev2. Defaults to
false
.
- cis Boolean
- GCP CIS Benchmark. Defaults to
false
. - cis12 Boolean
- GCP CIS 1.2 Benchmark. Defaults to
false
. - hipaa Boolean
- GCP HIPAA Report. Defaults to
false
. - hipaa
Rev2 Boolean - GCP HIPAA Report Rev2. Defaults to
false
. - iso27001 Boolean
- GCP ISO 27001 Report. Defaults to
false
. - k8s Boolean
- GCP K8S Benchmark. Defaults to
false
. - pci Boolean
- GCP PCI Benchmark. Defaults to
false
. - pci
Rev2 Boolean - GCP PCI Benchmark Rev2. Defaults to
false
. - soc Boolean
- GCP SOC 2 Report. Defaults to
false
. - soc
Rev2 Boolean - GCP SOC 2 Report Rev2. Defaults to
false
.
- cis boolean
- GCP CIS Benchmark. Defaults to
false
. - cis12 boolean
- GCP CIS 1.2 Benchmark. Defaults to
false
. - hipaa boolean
- GCP HIPAA Report. Defaults to
false
. - hipaa
Rev2 boolean - GCP HIPAA Report Rev2. Defaults to
false
. - iso27001 boolean
- GCP ISO 27001 Report. Defaults to
false
. - k8s boolean
- GCP K8S Benchmark. Defaults to
false
. - pci boolean
- GCP PCI Benchmark. Defaults to
false
. - pci
Rev2 boolean - GCP PCI Benchmark Rev2. Defaults to
false
. - soc boolean
- GCP SOC 2 Report. Defaults to
false
. - soc
Rev2 boolean - GCP SOC 2 Report Rev2. Defaults to
false
.
- cis bool
- GCP CIS Benchmark. Defaults to
false
. - cis12 bool
- GCP CIS 1.2 Benchmark. Defaults to
false
. - hipaa bool
- GCP HIPAA Report. Defaults to
false
. - hipaa_
rev2 bool - GCP HIPAA Report Rev2. Defaults to
false
. - iso27001 bool
- GCP ISO 27001 Report. Defaults to
false
. - k8s bool
- GCP K8S Benchmark. Defaults to
false
. - pci bool
- GCP PCI Benchmark. Defaults to
false
. - pci_
rev2 bool - GCP PCI Benchmark Rev2. Defaults to
false
. - soc bool
- GCP SOC 2 Report. Defaults to
false
. - soc_
rev2 bool - GCP SOC 2 Report Rev2. Defaults to
false
.
- cis Boolean
- GCP CIS Benchmark. Defaults to
false
. - cis12 Boolean
- GCP CIS 1.2 Benchmark. Defaults to
false
. - hipaa Boolean
- GCP HIPAA Report. Defaults to
false
. - hipaa
Rev2 Boolean - GCP HIPAA Report Rev2. Defaults to
false
. - iso27001 Boolean
- GCP ISO 27001 Report. Defaults to
false
. - k8s Boolean
- GCP K8S Benchmark. Defaults to
false
. - pci Boolean
- GCP PCI Benchmark. Defaults to
false
. - pci
Rev2 Boolean - GCP PCI Benchmark Rev2. Defaults to
false
. - soc Boolean
- GCP SOC 2 Report. Defaults to
false
. - soc
Rev2 Boolean - GCP SOC 2 Report Rev2. Defaults to
false
.
Import
A Lacework Report Rule can be imported using a GUID
, e.g.
$ pulumi import lacework:index/reportRule:ReportRule example EXAMPLE_1234BAE1E42182964D23973F44CFEA3C4AB63B99E9A1EC5
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- lacework lacework/terraform-provider-lacework
- License
- Notes
- This Pulumi package is based on the
lacework
Terraform Provider.