1. Packages
  2. Lacework Provider
  3. API Docs
  4. ReportRule
lacework 2.0.6 published on Monday, Apr 14, 2025 by lacework

lacework.ReportRule

Explore with Pulumi AI

lacework logo
lacework 2.0.6 published on Monday, Apr 14, 2025 by lacework

    Use this resource to create a Lacework Report Rule in order to route reports to one or more email alert channels. For more information, see the Report Rules documentation.

    Example Usage

    Create ReportRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ReportRule(name: string, args: ReportRuleArgs, opts?: CustomResourceOptions);
    @overload
    def ReportRule(resource_name: str,
                   args: ReportRuleArgs,
                   opts: Optional[ResourceOptions] = None)
    
    @overload
    def ReportRule(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   email_alert_channels: Optional[Sequence[str]] = None,
                   severities: Optional[Sequence[str]] = None,
                   aws_compliance_reports: Optional[ReportRuleAwsComplianceReportsArgs] = None,
                   azure_compliance_reports: Optional[ReportRuleAzureComplianceReportsArgs] = None,
                   daily_compliance_reports: Optional[ReportRuleDailyComplianceReportsArgs] = None,
                   description: Optional[str] = None,
                   enabled: Optional[bool] = None,
                   gcp_compliance_reports: Optional[ReportRuleGcpComplianceReportsArgs] = None,
                   name: Optional[str] = None,
                   report_rule_id: Optional[str] = None,
                   resource_groups: Optional[Sequence[str]] = None,
                   weekly_snapshot: Optional[bool] = None)
    func NewReportRule(ctx *Context, name string, args ReportRuleArgs, opts ...ResourceOption) (*ReportRule, error)
    public ReportRule(string name, ReportRuleArgs args, CustomResourceOptions? opts = null)
    public ReportRule(String name, ReportRuleArgs args)
    public ReportRule(String name, ReportRuleArgs args, CustomResourceOptions options)
    
    type: lacework:ReportRule
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args ReportRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ReportRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ReportRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ReportRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ReportRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var reportRuleResource = new Lacework.ReportRule("reportRuleResource", new()
    {
        EmailAlertChannels = new[]
        {
            "string",
        },
        Severities = new[]
        {
            "string",
        },
        AwsComplianceReports = new Lacework.Inputs.ReportRuleAwsComplianceReportsArgs
        {
            CisS3 = false,
            Hipaa = false,
            Iso2700 = false,
            Nist800171Rev2 = false,
            Nist80053Rev4 = false,
            Pci = false,
            Soc = false,
            SocRev2 = false,
        },
        AzureComplianceReports = new Lacework.Inputs.ReportRuleAzureComplianceReportsArgs
        {
            Cis = false,
            Cis131 = false,
            Pci = false,
            Soc = false,
        },
        DailyComplianceReports = new Lacework.Inputs.ReportRuleDailyComplianceReportsArgs
        {
            AwsCloudtrail = false,
            AwsCompliance = false,
            AzureActivityLog = false,
            AzureCompliance = false,
            GcpAuditTrail = false,
            GcpCompliance = false,
            HostSecurity = false,
            OpenshiftCompliance = false,
            OpenshiftComplianceEvents = false,
            Platform = false,
        },
        Description = "string",
        Enabled = false,
        GcpComplianceReports = new Lacework.Inputs.ReportRuleGcpComplianceReportsArgs
        {
            Cis = false,
            Cis12 = false,
            Hipaa = false,
            HipaaRev2 = false,
            Iso27001 = false,
            K8s = false,
            Pci = false,
            PciRev2 = false,
            Soc = false,
            SocRev2 = false,
        },
        Name = "string",
        ReportRuleId = "string",
        ResourceGroups = new[]
        {
            "string",
        },
        WeeklySnapshot = false,
    });
    
    example, err := lacework.NewReportRule(ctx, "reportRuleResource", &lacework.ReportRuleArgs{
    	EmailAlertChannels: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Severities: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	AwsComplianceReports: &lacework.ReportRuleAwsComplianceReportsArgs{
    		CisS3:          pulumi.Bool(false),
    		Hipaa:          pulumi.Bool(false),
    		Iso2700:        pulumi.Bool(false),
    		Nist800171Rev2: pulumi.Bool(false),
    		Nist80053Rev4:  pulumi.Bool(false),
    		Pci:            pulumi.Bool(false),
    		Soc:            pulumi.Bool(false),
    		SocRev2:        pulumi.Bool(false),
    	},
    	AzureComplianceReports: &lacework.ReportRuleAzureComplianceReportsArgs{
    		Cis:    pulumi.Bool(false),
    		Cis131: pulumi.Bool(false),
    		Pci:    pulumi.Bool(false),
    		Soc:    pulumi.Bool(false),
    	},
    	DailyComplianceReports: &lacework.ReportRuleDailyComplianceReportsArgs{
    		AwsCloudtrail:             pulumi.Bool(false),
    		AwsCompliance:             pulumi.Bool(false),
    		AzureActivityLog:          pulumi.Bool(false),
    		AzureCompliance:           pulumi.Bool(false),
    		GcpAuditTrail:             pulumi.Bool(false),
    		GcpCompliance:             pulumi.Bool(false),
    		HostSecurity:              pulumi.Bool(false),
    		OpenshiftCompliance:       pulumi.Bool(false),
    		OpenshiftComplianceEvents: pulumi.Bool(false),
    		Platform:                  pulumi.Bool(false),
    	},
    	Description: pulumi.String("string"),
    	Enabled:     pulumi.Bool(false),
    	GcpComplianceReports: &lacework.ReportRuleGcpComplianceReportsArgs{
    		Cis:       pulumi.Bool(false),
    		Cis12:     pulumi.Bool(false),
    		Hipaa:     pulumi.Bool(false),
    		HipaaRev2: pulumi.Bool(false),
    		Iso27001:  pulumi.Bool(false),
    		K8s:       pulumi.Bool(false),
    		Pci:       pulumi.Bool(false),
    		PciRev2:   pulumi.Bool(false),
    		Soc:       pulumi.Bool(false),
    		SocRev2:   pulumi.Bool(false),
    	},
    	Name:         pulumi.String("string"),
    	ReportRuleId: pulumi.String("string"),
    	ResourceGroups: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	WeeklySnapshot: pulumi.Bool(false),
    })
    
    var reportRuleResource = new ReportRule("reportRuleResource", ReportRuleArgs.builder()
        .emailAlertChannels("string")
        .severities("string")
        .awsComplianceReports(ReportRuleAwsComplianceReportsArgs.builder()
            .cisS3(false)
            .hipaa(false)
            .iso2700(false)
            .nist800171Rev2(false)
            .nist80053Rev4(false)
            .pci(false)
            .soc(false)
            .socRev2(false)
            .build())
        .azureComplianceReports(ReportRuleAzureComplianceReportsArgs.builder()
            .cis(false)
            .cis131(false)
            .pci(false)
            .soc(false)
            .build())
        .dailyComplianceReports(ReportRuleDailyComplianceReportsArgs.builder()
            .awsCloudtrail(false)
            .awsCompliance(false)
            .azureActivityLog(false)
            .azureCompliance(false)
            .gcpAuditTrail(false)
            .gcpCompliance(false)
            .hostSecurity(false)
            .openshiftCompliance(false)
            .openshiftComplianceEvents(false)
            .platform(false)
            .build())
        .description("string")
        .enabled(false)
        .gcpComplianceReports(ReportRuleGcpComplianceReportsArgs.builder()
            .cis(false)
            .cis12(false)
            .hipaa(false)
            .hipaaRev2(false)
            .iso27001(false)
            .k8s(false)
            .pci(false)
            .pciRev2(false)
            .soc(false)
            .socRev2(false)
            .build())
        .name("string")
        .reportRuleId("string")
        .resourceGroups("string")
        .weeklySnapshot(false)
        .build());
    
    report_rule_resource = lacework.ReportRule("reportRuleResource",
        email_alert_channels=["string"],
        severities=["string"],
        aws_compliance_reports={
            "cis_s3": False,
            "hipaa": False,
            "iso2700": False,
            "nist800171_rev2": False,
            "nist80053_rev4": False,
            "pci": False,
            "soc": False,
            "soc_rev2": False,
        },
        azure_compliance_reports={
            "cis": False,
            "cis131": False,
            "pci": False,
            "soc": False,
        },
        daily_compliance_reports={
            "aws_cloudtrail": False,
            "aws_compliance": False,
            "azure_activity_log": False,
            "azure_compliance": False,
            "gcp_audit_trail": False,
            "gcp_compliance": False,
            "host_security": False,
            "openshift_compliance": False,
            "openshift_compliance_events": False,
            "platform": False,
        },
        description="string",
        enabled=False,
        gcp_compliance_reports={
            "cis": False,
            "cis12": False,
            "hipaa": False,
            "hipaa_rev2": False,
            "iso27001": False,
            "k8s": False,
            "pci": False,
            "pci_rev2": False,
            "soc": False,
            "soc_rev2": False,
        },
        name="string",
        report_rule_id="string",
        resource_groups=["string"],
        weekly_snapshot=False)
    
    const reportRuleResource = new lacework.ReportRule("reportRuleResource", {
        emailAlertChannels: ["string"],
        severities: ["string"],
        awsComplianceReports: {
            cisS3: false,
            hipaa: false,
            iso2700: false,
            nist800171Rev2: false,
            nist80053Rev4: false,
            pci: false,
            soc: false,
            socRev2: false,
        },
        azureComplianceReports: {
            cis: false,
            cis131: false,
            pci: false,
            soc: false,
        },
        dailyComplianceReports: {
            awsCloudtrail: false,
            awsCompliance: false,
            azureActivityLog: false,
            azureCompliance: false,
            gcpAuditTrail: false,
            gcpCompliance: false,
            hostSecurity: false,
            openshiftCompliance: false,
            openshiftComplianceEvents: false,
            platform: false,
        },
        description: "string",
        enabled: false,
        gcpComplianceReports: {
            cis: false,
            cis12: false,
            hipaa: false,
            hipaaRev2: false,
            iso27001: false,
            k8s: false,
            pci: false,
            pciRev2: false,
            soc: false,
            socRev2: false,
        },
        name: "string",
        reportRuleId: "string",
        resourceGroups: ["string"],
        weeklySnapshot: false,
    });
    
    type: lacework:ReportRule
    properties:
        awsComplianceReports:
            cisS3: false
            hipaa: false
            iso2700: false
            nist80053Rev4: false
            nist800171Rev2: false
            pci: false
            soc: false
            socRev2: false
        azureComplianceReports:
            cis: false
            cis131: false
            pci: false
            soc: false
        dailyComplianceReports:
            awsCloudtrail: false
            awsCompliance: false
            azureActivityLog: false
            azureCompliance: false
            gcpAuditTrail: false
            gcpCompliance: false
            hostSecurity: false
            openshiftCompliance: false
            openshiftComplianceEvents: false
            platform: false
        description: string
        emailAlertChannels:
            - string
        enabled: false
        gcpComplianceReports:
            cis: false
            cis12: false
            hipaa: false
            hipaaRev2: false
            iso27001: false
            k8s: false
            pci: false
            pciRev2: false
            soc: false
            socRev2: false
        name: string
        reportRuleId: string
        resourceGroups:
            - string
        severities:
            - string
        weeklySnapshot: false
    

    ReportRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ReportRule resource accepts the following input properties:

    EmailAlertChannels List<string>
    The list of email alert channels for the rule to use.
    Severities List<string>
    The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
    AwsComplianceReports ReportRuleAwsComplianceReports
    Compliance reports for Aws. See Aws Compliance Reports below for details.
    AzureComplianceReports ReportRuleAzureComplianceReports
    Compliance reports for Azure. See Azure Compliance Reports below for details.
    DailyComplianceReports ReportRuleDailyComplianceReports
    Daily event summary reports. See Daily Compliance Reports below for details.
    Description string
    The description of the report rule.
    Enabled bool
    The state of the external integration. Defaults to true.
    GcpComplianceReports ReportRuleGcpComplianceReports
    Compliance reports for Gcp. See Gcp Compliance Reports below for details.
    Name string
    The report rule name.
    ReportRuleId string
    ResourceGroups List<string>
    The list of resource groups the rule will apply to.
    WeeklySnapshot bool
    A weekly compliance trend report for all monitored resources. Defaults to false.
    EmailAlertChannels []string
    The list of email alert channels for the rule to use.
    Severities []string
    The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
    AwsComplianceReports ReportRuleAwsComplianceReportsArgs
    Compliance reports for Aws. See Aws Compliance Reports below for details.
    AzureComplianceReports ReportRuleAzureComplianceReportsArgs
    Compliance reports for Azure. See Azure Compliance Reports below for details.
    DailyComplianceReports ReportRuleDailyComplianceReportsArgs
    Daily event summary reports. See Daily Compliance Reports below for details.
    Description string
    The description of the report rule.
    Enabled bool
    The state of the external integration. Defaults to true.
    GcpComplianceReports ReportRuleGcpComplianceReportsArgs
    Compliance reports for Gcp. See Gcp Compliance Reports below for details.
    Name string
    The report rule name.
    ReportRuleId string
    ResourceGroups []string
    The list of resource groups the rule will apply to.
    WeeklySnapshot bool
    A weekly compliance trend report for all monitored resources. Defaults to false.
    emailAlertChannels List<String>
    The list of email alert channels for the rule to use.
    severities List<String>
    The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
    awsComplianceReports ReportRuleAwsComplianceReports
    Compliance reports for Aws. See Aws Compliance Reports below for details.
    azureComplianceReports ReportRuleAzureComplianceReports
    Compliance reports for Azure. See Azure Compliance Reports below for details.
    dailyComplianceReports ReportRuleDailyComplianceReports
    Daily event summary reports. See Daily Compliance Reports below for details.
    description String
    The description of the report rule.
    enabled Boolean
    The state of the external integration. Defaults to true.
    gcpComplianceReports ReportRuleGcpComplianceReports
    Compliance reports for Gcp. See Gcp Compliance Reports below for details.
    name String
    The report rule name.
    reportRuleId String
    resourceGroups List<String>
    The list of resource groups the rule will apply to.
    weeklySnapshot Boolean
    A weekly compliance trend report for all monitored resources. Defaults to false.
    emailAlertChannels string[]
    The list of email alert channels for the rule to use.
    severities string[]
    The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
    awsComplianceReports ReportRuleAwsComplianceReports
    Compliance reports for Aws. See Aws Compliance Reports below for details.
    azureComplianceReports ReportRuleAzureComplianceReports
    Compliance reports for Azure. See Azure Compliance Reports below for details.
    dailyComplianceReports ReportRuleDailyComplianceReports
    Daily event summary reports. See Daily Compliance Reports below for details.
    description string
    The description of the report rule.
    enabled boolean
    The state of the external integration. Defaults to true.
    gcpComplianceReports ReportRuleGcpComplianceReports
    Compliance reports for Gcp. See Gcp Compliance Reports below for details.
    name string
    The report rule name.
    reportRuleId string
    resourceGroups string[]
    The list of resource groups the rule will apply to.
    weeklySnapshot boolean
    A weekly compliance trend report for all monitored resources. Defaults to false.
    email_alert_channels Sequence[str]
    The list of email alert channels for the rule to use.
    severities Sequence[str]
    The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
    aws_compliance_reports ReportRuleAwsComplianceReportsArgs
    Compliance reports for Aws. See Aws Compliance Reports below for details.
    azure_compliance_reports ReportRuleAzureComplianceReportsArgs
    Compliance reports for Azure. See Azure Compliance Reports below for details.
    daily_compliance_reports ReportRuleDailyComplianceReportsArgs
    Daily event summary reports. See Daily Compliance Reports below for details.
    description str
    The description of the report rule.
    enabled bool
    The state of the external integration. Defaults to true.
    gcp_compliance_reports ReportRuleGcpComplianceReportsArgs
    Compliance reports for Gcp. See Gcp Compliance Reports below for details.
    name str
    The report rule name.
    report_rule_id str
    resource_groups Sequence[str]
    The list of resource groups the rule will apply to.
    weekly_snapshot bool
    A weekly compliance trend report for all monitored resources. Defaults to false.
    emailAlertChannels List<String>
    The list of email alert channels for the rule to use.
    severities List<String>
    The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
    awsComplianceReports Property Map
    Compliance reports for Aws. See Aws Compliance Reports below for details.
    azureComplianceReports Property Map
    Compliance reports for Azure. See Azure Compliance Reports below for details.
    dailyComplianceReports Property Map
    Daily event summary reports. See Daily Compliance Reports below for details.
    description String
    The description of the report rule.
    enabled Boolean
    The state of the external integration. Defaults to true.
    gcpComplianceReports Property Map
    Compliance reports for Gcp. See Gcp Compliance Reports below for details.
    name String
    The report rule name.
    reportRuleId String
    resourceGroups List<String>
    The list of resource groups the rule will apply to.
    weeklySnapshot Boolean
    A weekly compliance trend report for all monitored resources. Defaults to false.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ReportRule resource produces the following output properties:

    CreatedOrUpdatedBy string
    CreatedOrUpdatedTime string
    Guid string
    Id string
    The provider-assigned unique ID for this managed resource.
    Type string
    CreatedOrUpdatedBy string
    CreatedOrUpdatedTime string
    Guid string
    Id string
    The provider-assigned unique ID for this managed resource.
    Type string
    createdOrUpdatedBy String
    createdOrUpdatedTime String
    guid String
    id String
    The provider-assigned unique ID for this managed resource.
    type String
    createdOrUpdatedBy string
    createdOrUpdatedTime string
    guid string
    id string
    The provider-assigned unique ID for this managed resource.
    type string
    created_or_updated_by str
    created_or_updated_time str
    guid str
    id str
    The provider-assigned unique ID for this managed resource.
    type str
    createdOrUpdatedBy String
    createdOrUpdatedTime String
    guid String
    id String
    The provider-assigned unique ID for this managed resource.
    type String

    Look up Existing ReportRule Resource

    Get an existing ReportRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ReportRuleState, opts?: CustomResourceOptions): ReportRule
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            aws_compliance_reports: Optional[ReportRuleAwsComplianceReportsArgs] = None,
            azure_compliance_reports: Optional[ReportRuleAzureComplianceReportsArgs] = None,
            created_or_updated_by: Optional[str] = None,
            created_or_updated_time: Optional[str] = None,
            daily_compliance_reports: Optional[ReportRuleDailyComplianceReportsArgs] = None,
            description: Optional[str] = None,
            email_alert_channels: Optional[Sequence[str]] = None,
            enabled: Optional[bool] = None,
            gcp_compliance_reports: Optional[ReportRuleGcpComplianceReportsArgs] = None,
            guid: Optional[str] = None,
            name: Optional[str] = None,
            report_rule_id: Optional[str] = None,
            resource_groups: Optional[Sequence[str]] = None,
            severities: Optional[Sequence[str]] = None,
            type: Optional[str] = None,
            weekly_snapshot: Optional[bool] = None) -> ReportRule
    func GetReportRule(ctx *Context, name string, id IDInput, state *ReportRuleState, opts ...ResourceOption) (*ReportRule, error)
    public static ReportRule Get(string name, Input<string> id, ReportRuleState? state, CustomResourceOptions? opts = null)
    public static ReportRule get(String name, Output<String> id, ReportRuleState state, CustomResourceOptions options)
    resources:  _:    type: lacework:ReportRule    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AwsComplianceReports ReportRuleAwsComplianceReports
    Compliance reports for Aws. See Aws Compliance Reports below for details.
    AzureComplianceReports ReportRuleAzureComplianceReports
    Compliance reports for Azure. See Azure Compliance Reports below for details.
    CreatedOrUpdatedBy string
    CreatedOrUpdatedTime string
    DailyComplianceReports ReportRuleDailyComplianceReports
    Daily event summary reports. See Daily Compliance Reports below for details.
    Description string
    The description of the report rule.
    EmailAlertChannels List<string>
    The list of email alert channels for the rule to use.
    Enabled bool
    The state of the external integration. Defaults to true.
    GcpComplianceReports ReportRuleGcpComplianceReports
    Compliance reports for Gcp. See Gcp Compliance Reports below for details.
    Guid string
    Name string
    The report rule name.
    ReportRuleId string
    ResourceGroups List<string>
    The list of resource groups the rule will apply to.
    Severities List<string>
    The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
    Type string
    WeeklySnapshot bool
    A weekly compliance trend report for all monitored resources. Defaults to false.
    AwsComplianceReports ReportRuleAwsComplianceReportsArgs
    Compliance reports for Aws. See Aws Compliance Reports below for details.
    AzureComplianceReports ReportRuleAzureComplianceReportsArgs
    Compliance reports for Azure. See Azure Compliance Reports below for details.
    CreatedOrUpdatedBy string
    CreatedOrUpdatedTime string
    DailyComplianceReports ReportRuleDailyComplianceReportsArgs
    Daily event summary reports. See Daily Compliance Reports below for details.
    Description string
    The description of the report rule.
    EmailAlertChannels []string
    The list of email alert channels for the rule to use.
    Enabled bool
    The state of the external integration. Defaults to true.
    GcpComplianceReports ReportRuleGcpComplianceReportsArgs
    Compliance reports for Gcp. See Gcp Compliance Reports below for details.
    Guid string
    Name string
    The report rule name.
    ReportRuleId string
    ResourceGroups []string
    The list of resource groups the rule will apply to.
    Severities []string
    The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
    Type string
    WeeklySnapshot bool
    A weekly compliance trend report for all monitored resources. Defaults to false.
    awsComplianceReports ReportRuleAwsComplianceReports
    Compliance reports for Aws. See Aws Compliance Reports below for details.
    azureComplianceReports ReportRuleAzureComplianceReports
    Compliance reports for Azure. See Azure Compliance Reports below for details.
    createdOrUpdatedBy String
    createdOrUpdatedTime String
    dailyComplianceReports ReportRuleDailyComplianceReports
    Daily event summary reports. See Daily Compliance Reports below for details.
    description String
    The description of the report rule.
    emailAlertChannels List<String>
    The list of email alert channels for the rule to use.
    enabled Boolean
    The state of the external integration. Defaults to true.
    gcpComplianceReports ReportRuleGcpComplianceReports
    Compliance reports for Gcp. See Gcp Compliance Reports below for details.
    guid String
    name String
    The report rule name.
    reportRuleId String
    resourceGroups List<String>
    The list of resource groups the rule will apply to.
    severities List<String>
    The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
    type String
    weeklySnapshot Boolean
    A weekly compliance trend report for all monitored resources. Defaults to false.
    awsComplianceReports ReportRuleAwsComplianceReports
    Compliance reports for Aws. See Aws Compliance Reports below for details.
    azureComplianceReports ReportRuleAzureComplianceReports
    Compliance reports for Azure. See Azure Compliance Reports below for details.
    createdOrUpdatedBy string
    createdOrUpdatedTime string
    dailyComplianceReports ReportRuleDailyComplianceReports
    Daily event summary reports. See Daily Compliance Reports below for details.
    description string
    The description of the report rule.
    emailAlertChannels string[]
    The list of email alert channels for the rule to use.
    enabled boolean
    The state of the external integration. Defaults to true.
    gcpComplianceReports ReportRuleGcpComplianceReports
    Compliance reports for Gcp. See Gcp Compliance Reports below for details.
    guid string
    name string
    The report rule name.
    reportRuleId string
    resourceGroups string[]
    The list of resource groups the rule will apply to.
    severities string[]
    The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
    type string
    weeklySnapshot boolean
    A weekly compliance trend report for all monitored resources. Defaults to false.
    aws_compliance_reports ReportRuleAwsComplianceReportsArgs
    Compliance reports for Aws. See Aws Compliance Reports below for details.
    azure_compliance_reports ReportRuleAzureComplianceReportsArgs
    Compliance reports for Azure. See Azure Compliance Reports below for details.
    created_or_updated_by str
    created_or_updated_time str
    daily_compliance_reports ReportRuleDailyComplianceReportsArgs
    Daily event summary reports. See Daily Compliance Reports below for details.
    description str
    The description of the report rule.
    email_alert_channels Sequence[str]
    The list of email alert channels for the rule to use.
    enabled bool
    The state of the external integration. Defaults to true.
    gcp_compliance_reports ReportRuleGcpComplianceReportsArgs
    Compliance reports for Gcp. See Gcp Compliance Reports below for details.
    guid str
    name str
    The report rule name.
    report_rule_id str
    resource_groups Sequence[str]
    The list of resource groups the rule will apply to.
    severities Sequence[str]
    The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
    type str
    weekly_snapshot bool
    A weekly compliance trend report for all monitored resources. Defaults to false.
    awsComplianceReports Property Map
    Compliance reports for Aws. See Aws Compliance Reports below for details.
    azureComplianceReports Property Map
    Compliance reports for Azure. See Azure Compliance Reports below for details.
    createdOrUpdatedBy String
    createdOrUpdatedTime String
    dailyComplianceReports Property Map
    Daily event summary reports. See Daily Compliance Reports below for details.
    description String
    The description of the report rule.
    emailAlertChannels List<String>
    The list of email alert channels for the rule to use.
    enabled Boolean
    The state of the external integration. Defaults to true.
    gcpComplianceReports Property Map
    Compliance reports for Gcp. See Gcp Compliance Reports below for details.
    guid String
    name String
    The report rule name.
    reportRuleId String
    resourceGroups List<String>
    The list of resource groups the rule will apply to.
    severities List<String>
    The list of the severities that the rule will apply. Valid severities include: Critical, High, Medium, Low and Info.
    type String
    weeklySnapshot Boolean
    A weekly compliance trend report for all monitored resources. Defaults to false.

    Supporting Types

    ReportRuleAwsComplianceReports, ReportRuleAwsComplianceReportsArgs

    CisS3 bool
    AWS CIS Benchmark and S3 Report. Defaults to false.
    Hipaa bool
    AWS HIPAA Report. Defaults to false.
    Iso2700 bool
    AWS ISO 27001:2013 Report. Defaults to false.
    Nist800171Rev2 bool
    AWS NIST 800-171 Report. Defaults to false.
    Nist80053Rev4 bool
    AWS NIST 800-53 Report. Defaults to false.
    Pci bool
    AWS PCI DSS Report. Defaults to false.
    Soc bool
    AWS SOC 2 Report. Defaults to false.
    SocRev2 bool
    AWS SOC 2 Report Rev2. Defaults to false.
    CisS3 bool
    AWS CIS Benchmark and S3 Report. Defaults to false.
    Hipaa bool
    AWS HIPAA Report. Defaults to false.
    Iso2700 bool
    AWS ISO 27001:2013 Report. Defaults to false.
    Nist800171Rev2 bool
    AWS NIST 800-171 Report. Defaults to false.
    Nist80053Rev4 bool
    AWS NIST 800-53 Report. Defaults to false.
    Pci bool
    AWS PCI DSS Report. Defaults to false.
    Soc bool
    AWS SOC 2 Report. Defaults to false.
    SocRev2 bool
    AWS SOC 2 Report Rev2. Defaults to false.
    cisS3 Boolean
    AWS CIS Benchmark and S3 Report. Defaults to false.
    hipaa Boolean
    AWS HIPAA Report. Defaults to false.
    iso2700 Boolean
    AWS ISO 27001:2013 Report. Defaults to false.
    nist800171Rev2 Boolean
    AWS NIST 800-171 Report. Defaults to false.
    nist80053Rev4 Boolean
    AWS NIST 800-53 Report. Defaults to false.
    pci Boolean
    AWS PCI DSS Report. Defaults to false.
    soc Boolean
    AWS SOC 2 Report. Defaults to false.
    socRev2 Boolean
    AWS SOC 2 Report Rev2. Defaults to false.
    cisS3 boolean
    AWS CIS Benchmark and S3 Report. Defaults to false.
    hipaa boolean
    AWS HIPAA Report. Defaults to false.
    iso2700 boolean
    AWS ISO 27001:2013 Report. Defaults to false.
    nist800171Rev2 boolean
    AWS NIST 800-171 Report. Defaults to false.
    nist80053Rev4 boolean
    AWS NIST 800-53 Report. Defaults to false.
    pci boolean
    AWS PCI DSS Report. Defaults to false.
    soc boolean
    AWS SOC 2 Report. Defaults to false.
    socRev2 boolean
    AWS SOC 2 Report Rev2. Defaults to false.
    cis_s3 bool
    AWS CIS Benchmark and S3 Report. Defaults to false.
    hipaa bool
    AWS HIPAA Report. Defaults to false.
    iso2700 bool
    AWS ISO 27001:2013 Report. Defaults to false.
    nist800171_rev2 bool
    AWS NIST 800-171 Report. Defaults to false.
    nist80053_rev4 bool
    AWS NIST 800-53 Report. Defaults to false.
    pci bool
    AWS PCI DSS Report. Defaults to false.
    soc bool
    AWS SOC 2 Report. Defaults to false.
    soc_rev2 bool
    AWS SOC 2 Report Rev2. Defaults to false.
    cisS3 Boolean
    AWS CIS Benchmark and S3 Report. Defaults to false.
    hipaa Boolean
    AWS HIPAA Report. Defaults to false.
    iso2700 Boolean
    AWS ISO 27001:2013 Report. Defaults to false.
    nist800171Rev2 Boolean
    AWS NIST 800-171 Report. Defaults to false.
    nist80053Rev4 Boolean
    AWS NIST 800-53 Report. Defaults to false.
    pci Boolean
    AWS PCI DSS Report. Defaults to false.
    soc Boolean
    AWS SOC 2 Report. Defaults to false.
    socRev2 Boolean
    AWS SOC 2 Report Rev2. Defaults to false.

    ReportRuleAzureComplianceReports, ReportRuleAzureComplianceReportsArgs

    Cis bool
    Azure CIS Benchmark. Defaults to false.
    Cis131 bool
    Azure CIS 1.3.1 Benchmark. Defaults to false.
    Pci bool
    Azure PCI Benchmark. Defaults to false.
    Soc bool
    Azure SOC 2 Report. Defaults to false.
    Cis bool
    Azure CIS Benchmark. Defaults to false.
    Cis131 bool
    Azure CIS 1.3.1 Benchmark. Defaults to false.
    Pci bool
    Azure PCI Benchmark. Defaults to false.
    Soc bool
    Azure SOC 2 Report. Defaults to false.
    cis Boolean
    Azure CIS Benchmark. Defaults to false.
    cis131 Boolean
    Azure CIS 1.3.1 Benchmark. Defaults to false.
    pci Boolean
    Azure PCI Benchmark. Defaults to false.
    soc Boolean
    Azure SOC 2 Report. Defaults to false.
    cis boolean
    Azure CIS Benchmark. Defaults to false.
    cis131 boolean
    Azure CIS 1.3.1 Benchmark. Defaults to false.
    pci boolean
    Azure PCI Benchmark. Defaults to false.
    soc boolean
    Azure SOC 2 Report. Defaults to false.
    cis bool
    Azure CIS Benchmark. Defaults to false.
    cis131 bool
    Azure CIS 1.3.1 Benchmark. Defaults to false.
    pci bool
    Azure PCI Benchmark. Defaults to false.
    soc bool
    Azure SOC 2 Report. Defaults to false.
    cis Boolean
    Azure CIS Benchmark. Defaults to false.
    cis131 Boolean
    Azure CIS 1.3.1 Benchmark. Defaults to false.
    pci Boolean
    Azure PCI Benchmark. Defaults to false.
    soc Boolean
    Azure SOC 2 Report. Defaults to false.

    ReportRuleDailyComplianceReports, ReportRuleDailyComplianceReportsArgs

    AwsCloudtrail bool
    AWS CloudTrail. Defaults to false.
    AwsCompliance bool
    AWS Compliance. Defaults to false.
    AzureActivityLog bool
    Azure Activity Log. Defaults to false.
    AzureCompliance bool
    GcpAuditTrail bool
    GCP Audit Trail. Defaults to false.
    GcpCompliance bool
    GCP Compliance. Defaults to false.
    HostSecurity bool
    Host Security. Defaults to false.
    OpenshiftCompliance bool
    Openshift Compliance (Optional) Defaults to false.
    OpenshiftComplianceEvents bool
    Openshift Compliance Events (Optional) Defaults to false.
    Platform bool
    Platform Events. Defaults to false.
    AwsCloudtrail bool
    AWS CloudTrail. Defaults to false.
    AwsCompliance bool
    AWS Compliance. Defaults to false.
    AzureActivityLog bool
    Azure Activity Log. Defaults to false.
    AzureCompliance bool
    GcpAuditTrail bool
    GCP Audit Trail. Defaults to false.
    GcpCompliance bool
    GCP Compliance. Defaults to false.
    HostSecurity bool
    Host Security. Defaults to false.
    OpenshiftCompliance bool
    Openshift Compliance (Optional) Defaults to false.
    OpenshiftComplianceEvents bool
    Openshift Compliance Events (Optional) Defaults to false.
    Platform bool
    Platform Events. Defaults to false.
    awsCloudtrail Boolean
    AWS CloudTrail. Defaults to false.
    awsCompliance Boolean
    AWS Compliance. Defaults to false.
    azureActivityLog Boolean
    Azure Activity Log. Defaults to false.
    azureCompliance Boolean
    gcpAuditTrail Boolean
    GCP Audit Trail. Defaults to false.
    gcpCompliance Boolean
    GCP Compliance. Defaults to false.
    hostSecurity Boolean
    Host Security. Defaults to false.
    openshiftCompliance Boolean
    Openshift Compliance (Optional) Defaults to false.
    openshiftComplianceEvents Boolean
    Openshift Compliance Events (Optional) Defaults to false.
    platform Boolean
    Platform Events. Defaults to false.
    awsCloudtrail boolean
    AWS CloudTrail. Defaults to false.
    awsCompliance boolean
    AWS Compliance. Defaults to false.
    azureActivityLog boolean
    Azure Activity Log. Defaults to false.
    azureCompliance boolean
    gcpAuditTrail boolean
    GCP Audit Trail. Defaults to false.
    gcpCompliance boolean
    GCP Compliance. Defaults to false.
    hostSecurity boolean
    Host Security. Defaults to false.
    openshiftCompliance boolean
    Openshift Compliance (Optional) Defaults to false.
    openshiftComplianceEvents boolean
    Openshift Compliance Events (Optional) Defaults to false.
    platform boolean
    Platform Events. Defaults to false.
    aws_cloudtrail bool
    AWS CloudTrail. Defaults to false.
    aws_compliance bool
    AWS Compliance. Defaults to false.
    azure_activity_log bool
    Azure Activity Log. Defaults to false.
    azure_compliance bool
    gcp_audit_trail bool
    GCP Audit Trail. Defaults to false.
    gcp_compliance bool
    GCP Compliance. Defaults to false.
    host_security bool
    Host Security. Defaults to false.
    openshift_compliance bool
    Openshift Compliance (Optional) Defaults to false.
    openshift_compliance_events bool
    Openshift Compliance Events (Optional) Defaults to false.
    platform bool
    Platform Events. Defaults to false.
    awsCloudtrail Boolean
    AWS CloudTrail. Defaults to false.
    awsCompliance Boolean
    AWS Compliance. Defaults to false.
    azureActivityLog Boolean
    Azure Activity Log. Defaults to false.
    azureCompliance Boolean
    gcpAuditTrail Boolean
    GCP Audit Trail. Defaults to false.
    gcpCompliance Boolean
    GCP Compliance. Defaults to false.
    hostSecurity Boolean
    Host Security. Defaults to false.
    openshiftCompliance Boolean
    Openshift Compliance (Optional) Defaults to false.
    openshiftComplianceEvents Boolean
    Openshift Compliance Events (Optional) Defaults to false.
    platform Boolean
    Platform Events. Defaults to false.

    ReportRuleGcpComplianceReports, ReportRuleGcpComplianceReportsArgs

    Cis bool
    GCP CIS Benchmark. Defaults to false.
    Cis12 bool
    GCP CIS 1.2 Benchmark. Defaults to false.
    Hipaa bool
    GCP HIPAA Report. Defaults to false.
    HipaaRev2 bool
    GCP HIPAA Report Rev2. Defaults to false.
    Iso27001 bool
    GCP ISO 27001 Report. Defaults to false.
    K8s bool
    GCP K8S Benchmark. Defaults to false.
    Pci bool
    GCP PCI Benchmark. Defaults to false.
    PciRev2 bool
    GCP PCI Benchmark Rev2. Defaults to false.
    Soc bool
    GCP SOC 2 Report. Defaults to false.
    SocRev2 bool
    GCP SOC 2 Report Rev2. Defaults to false.
    Cis bool
    GCP CIS Benchmark. Defaults to false.
    Cis12 bool
    GCP CIS 1.2 Benchmark. Defaults to false.
    Hipaa bool
    GCP HIPAA Report. Defaults to false.
    HipaaRev2 bool
    GCP HIPAA Report Rev2. Defaults to false.
    Iso27001 bool
    GCP ISO 27001 Report. Defaults to false.
    K8s bool
    GCP K8S Benchmark. Defaults to false.
    Pci bool
    GCP PCI Benchmark. Defaults to false.
    PciRev2 bool
    GCP PCI Benchmark Rev2. Defaults to false.
    Soc bool
    GCP SOC 2 Report. Defaults to false.
    SocRev2 bool
    GCP SOC 2 Report Rev2. Defaults to false.
    cis Boolean
    GCP CIS Benchmark. Defaults to false.
    cis12 Boolean
    GCP CIS 1.2 Benchmark. Defaults to false.
    hipaa Boolean
    GCP HIPAA Report. Defaults to false.
    hipaaRev2 Boolean
    GCP HIPAA Report Rev2. Defaults to false.
    iso27001 Boolean
    GCP ISO 27001 Report. Defaults to false.
    k8s Boolean
    GCP K8S Benchmark. Defaults to false.
    pci Boolean
    GCP PCI Benchmark. Defaults to false.
    pciRev2 Boolean
    GCP PCI Benchmark Rev2. Defaults to false.
    soc Boolean
    GCP SOC 2 Report. Defaults to false.
    socRev2 Boolean
    GCP SOC 2 Report Rev2. Defaults to false.
    cis boolean
    GCP CIS Benchmark. Defaults to false.
    cis12 boolean
    GCP CIS 1.2 Benchmark. Defaults to false.
    hipaa boolean
    GCP HIPAA Report. Defaults to false.
    hipaaRev2 boolean
    GCP HIPAA Report Rev2. Defaults to false.
    iso27001 boolean
    GCP ISO 27001 Report. Defaults to false.
    k8s boolean
    GCP K8S Benchmark. Defaults to false.
    pci boolean
    GCP PCI Benchmark. Defaults to false.
    pciRev2 boolean
    GCP PCI Benchmark Rev2. Defaults to false.
    soc boolean
    GCP SOC 2 Report. Defaults to false.
    socRev2 boolean
    GCP SOC 2 Report Rev2. Defaults to false.
    cis bool
    GCP CIS Benchmark. Defaults to false.
    cis12 bool
    GCP CIS 1.2 Benchmark. Defaults to false.
    hipaa bool
    GCP HIPAA Report. Defaults to false.
    hipaa_rev2 bool
    GCP HIPAA Report Rev2. Defaults to false.
    iso27001 bool
    GCP ISO 27001 Report. Defaults to false.
    k8s bool
    GCP K8S Benchmark. Defaults to false.
    pci bool
    GCP PCI Benchmark. Defaults to false.
    pci_rev2 bool
    GCP PCI Benchmark Rev2. Defaults to false.
    soc bool
    GCP SOC 2 Report. Defaults to false.
    soc_rev2 bool
    GCP SOC 2 Report Rev2. Defaults to false.
    cis Boolean
    GCP CIS Benchmark. Defaults to false.
    cis12 Boolean
    GCP CIS 1.2 Benchmark. Defaults to false.
    hipaa Boolean
    GCP HIPAA Report. Defaults to false.
    hipaaRev2 Boolean
    GCP HIPAA Report Rev2. Defaults to false.
    iso27001 Boolean
    GCP ISO 27001 Report. Defaults to false.
    k8s Boolean
    GCP K8S Benchmark. Defaults to false.
    pci Boolean
    GCP PCI Benchmark. Defaults to false.
    pciRev2 Boolean
    GCP PCI Benchmark Rev2. Defaults to false.
    soc Boolean
    GCP SOC 2 Report. Defaults to false.
    socRev2 Boolean
    GCP SOC 2 Report Rev2. Defaults to false.

    Import

    A Lacework Report Rule can be imported using a GUID, e.g.

    $ pulumi import lacework:index/reportRule:ReportRule example EXAMPLE_1234BAE1E42182964D23973F44CFEA3C4AB63B99E9A1EC5
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    lacework lacework/terraform-provider-lacework
    License
    Notes
    This Pulumi package is based on the lacework Terraform Provider.
    lacework logo
    lacework 2.0.6 published on Monday, Apr 14, 2025 by lacework