1. Packages
  2. Sysdig Provider
  3. API Docs
  4. SecurePostureAcceptRisk
sysdig 1.56.0 published on Wednesday, Apr 30, 2025 by sysdiglabs

sysdig.SecurePostureAcceptRisk

Explore with Pulumi AI

sysdig logo
sysdig 1.56.0 published on Wednesday, Apr 30, 2025 by sysdiglabs

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as sysdig from "@pulumi/sysdig";
    
    const acceptRiskGlobal = new sysdig.SecurePostureAcceptRisk("acceptRiskGlobal", {
        controlName: "Network - Enabled Endpoint Private Access in Existing Clusters (EKS)",
        description: "Accept risk for zone",
        expiresIn: "30 Days",
        reason: "Risk Transferred",
        zoneName: "Entire Infrastructure",
    });
    const acceptRiskResource = new sysdig.SecurePostureAcceptRisk("acceptRiskResource", {
        controlName: "Fargate - Untrusted Workloads",
        description: "Accept risk for resource",
        expiresIn: "30 Days",
        filter: "name in (\"aws-int-01-cicd-aws-eks-workloads-shield\") and providerType in (\"AWS\") and kind in (\"AWS_EKS_CLUSTER\") and location in (\"us-east-1\")",
        reason: "Risk Transferred",
    });
    const schedulerSetToLoopbackBindAddress = new sysdig.SecurePostureAcceptRisk("schedulerSetToLoopbackBindAddress", {
        controlName: "Scheduler - Set to Loopback bind-address",
        description: "This is custom risk acceptance for scheduler_set_to_loopback_bind_address",
        endTime: "1730293523000",
        expiresIn: "Custom",
        reason: "Custom",
        zoneName: "Entire Infrastructure",
    });
    
    import pulumi
    import pulumi_sysdig as sysdig
    
    accept_risk_global = sysdig.SecurePostureAcceptRisk("acceptRiskGlobal",
        control_name="Network - Enabled Endpoint Private Access in Existing Clusters (EKS)",
        description="Accept risk for zone",
        expires_in="30 Days",
        reason="Risk Transferred",
        zone_name="Entire Infrastructure")
    accept_risk_resource = sysdig.SecurePostureAcceptRisk("acceptRiskResource",
        control_name="Fargate - Untrusted Workloads",
        description="Accept risk for resource",
        expires_in="30 Days",
        filter="name in (\"aws-int-01-cicd-aws-eks-workloads-shield\") and providerType in (\"AWS\") and kind in (\"AWS_EKS_CLUSTER\") and location in (\"us-east-1\")",
        reason="Risk Transferred")
    scheduler_set_to_loopback_bind_address = sysdig.SecurePostureAcceptRisk("schedulerSetToLoopbackBindAddress",
        control_name="Scheduler - Set to Loopback bind-address",
        description="This is custom risk acceptance for scheduler_set_to_loopback_bind_address",
        end_time="1730293523000",
        expires_in="Custom",
        reason="Custom",
        zone_name="Entire Infrastructure")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/sysdig/sysdig"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := sysdig.NewSecurePostureAcceptRisk(ctx, "acceptRiskGlobal", &sysdig.SecurePostureAcceptRiskArgs{
    			ControlName: pulumi.String("Network - Enabled Endpoint Private Access in Existing Clusters (EKS)"),
    			Description: pulumi.String("Accept risk for zone"),
    			ExpiresIn:   pulumi.String("30 Days"),
    			Reason:      pulumi.String("Risk Transferred"),
    			ZoneName:    pulumi.String("Entire Infrastructure"),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = sysdig.NewSecurePostureAcceptRisk(ctx, "acceptRiskResource", &sysdig.SecurePostureAcceptRiskArgs{
    			ControlName: pulumi.String("Fargate - Untrusted Workloads"),
    			Description: pulumi.String("Accept risk for resource"),
    			ExpiresIn:   pulumi.String("30 Days"),
    			Filter:      pulumi.String("name in (\"aws-int-01-cicd-aws-eks-workloads-shield\") and providerType in (\"AWS\") and kind in (\"AWS_EKS_CLUSTER\") and location in (\"us-east-1\")"),
    			Reason:      pulumi.String("Risk Transferred"),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = sysdig.NewSecurePostureAcceptRisk(ctx, "schedulerSetToLoopbackBindAddress", &sysdig.SecurePostureAcceptRiskArgs{
    			ControlName: pulumi.String("Scheduler - Set to Loopback bind-address"),
    			Description: pulumi.String("This is custom risk acceptance for scheduler_set_to_loopback_bind_address"),
    			EndTime:     pulumi.String("1730293523000"),
    			ExpiresIn:   pulumi.String("Custom"),
    			Reason:      pulumi.String("Custom"),
    			ZoneName:    pulumi.String("Entire Infrastructure"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Sysdig = Pulumi.Sysdig;
    
    return await Deployment.RunAsync(() => 
    {
        var acceptRiskGlobal = new Sysdig.SecurePostureAcceptRisk("acceptRiskGlobal", new()
        {
            ControlName = "Network - Enabled Endpoint Private Access in Existing Clusters (EKS)",
            Description = "Accept risk for zone",
            ExpiresIn = "30 Days",
            Reason = "Risk Transferred",
            ZoneName = "Entire Infrastructure",
        });
    
        var acceptRiskResource = new Sysdig.SecurePostureAcceptRisk("acceptRiskResource", new()
        {
            ControlName = "Fargate - Untrusted Workloads",
            Description = "Accept risk for resource",
            ExpiresIn = "30 Days",
            Filter = "name in (\"aws-int-01-cicd-aws-eks-workloads-shield\") and providerType in (\"AWS\") and kind in (\"AWS_EKS_CLUSTER\") and location in (\"us-east-1\")",
            Reason = "Risk Transferred",
        });
    
        var schedulerSetToLoopbackBindAddress = new Sysdig.SecurePostureAcceptRisk("schedulerSetToLoopbackBindAddress", new()
        {
            ControlName = "Scheduler - Set to Loopback bind-address",
            Description = "This is custom risk acceptance for scheduler_set_to_loopback_bind_address",
            EndTime = "1730293523000",
            ExpiresIn = "Custom",
            Reason = "Custom",
            ZoneName = "Entire Infrastructure",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.sysdig.SecurePostureAcceptRisk;
    import com.pulumi.sysdig.SecurePostureAcceptRiskArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var acceptRiskGlobal = new SecurePostureAcceptRisk("acceptRiskGlobal", SecurePostureAcceptRiskArgs.builder()
                .controlName("Network - Enabled Endpoint Private Access in Existing Clusters (EKS)")
                .description("Accept risk for zone")
                .expiresIn("30 Days")
                .reason("Risk Transferred")
                .zoneName("Entire Infrastructure")
                .build());
    
            var acceptRiskResource = new SecurePostureAcceptRisk("acceptRiskResource", SecurePostureAcceptRiskArgs.builder()
                .controlName("Fargate - Untrusted Workloads")
                .description("Accept risk for resource")
                .expiresIn("30 Days")
                .filter("name in (\"aws-int-01-cicd-aws-eks-workloads-shield\") and providerType in (\"AWS\") and kind in (\"AWS_EKS_CLUSTER\") and location in (\"us-east-1\")")
                .reason("Risk Transferred")
                .build());
    
            var schedulerSetToLoopbackBindAddress = new SecurePostureAcceptRisk("schedulerSetToLoopbackBindAddress", SecurePostureAcceptRiskArgs.builder()
                .controlName("Scheduler - Set to Loopback bind-address")
                .description("This is custom risk acceptance for scheduler_set_to_loopback_bind_address")
                .endTime("1730293523000")
                .expiresIn("Custom")
                .reason("Custom")
                .zoneName("Entire Infrastructure")
                .build());
    
        }
    }
    
    resources:
      acceptRiskGlobal:
        type: sysdig:SecurePostureAcceptRisk
        properties:
          controlName: Network - Enabled Endpoint Private Access in Existing Clusters (EKS)
          description: Accept risk for zone
          expiresIn: 30 Days
          reason: Risk Transferred
          zoneName: Entire Infrastructure
      acceptRiskResource:
        type: sysdig:SecurePostureAcceptRisk
        properties:
          controlName: Fargate - Untrusted Workloads
          description: Accept risk for resource
          expiresIn: 30 Days
          filter: name in ("aws-int-01-cicd-aws-eks-workloads-shield") and providerType in ("AWS") and kind in ("AWS_EKS_CLUSTER") and location in ("us-east-1")
          reason: Risk Transferred
      schedulerSetToLoopbackBindAddress:
        type: sysdig:SecurePostureAcceptRisk
        properties:
          controlName: Scheduler - Set to Loopback bind-address
          description: This is custom risk acceptance for scheduler_set_to_loopback_bind_address
          endTime: '1730293523000'
          expiresIn: Custom
          reason: Custom
          zoneName: Entire Infrastructure
    

    Create SecurePostureAcceptRisk Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new SecurePostureAcceptRisk(name: string, args: SecurePostureAcceptRiskArgs, opts?: CustomResourceOptions);
    @overload
    def SecurePostureAcceptRisk(resource_name: str,
                                args: SecurePostureAcceptRiskArgs,
                                opts: Optional[ResourceOptions] = None)
    
    @overload
    def SecurePostureAcceptRisk(resource_name: str,
                                opts: Optional[ResourceOptions] = None,
                                control_name: Optional[str] = None,
                                description: Optional[str] = None,
                                expires_in: Optional[str] = None,
                                reason: Optional[str] = None,
                                end_time: Optional[str] = None,
                                filter: Optional[str] = None,
                                timeouts: Optional[SecurePostureAcceptRiskTimeoutsArgs] = None,
                                zone_name: Optional[str] = None)
    func NewSecurePostureAcceptRisk(ctx *Context, name string, args SecurePostureAcceptRiskArgs, opts ...ResourceOption) (*SecurePostureAcceptRisk, error)
    public SecurePostureAcceptRisk(string name, SecurePostureAcceptRiskArgs args, CustomResourceOptions? opts = null)
    public SecurePostureAcceptRisk(String name, SecurePostureAcceptRiskArgs args)
    public SecurePostureAcceptRisk(String name, SecurePostureAcceptRiskArgs args, CustomResourceOptions options)
    
    type: sysdig:SecurePostureAcceptRisk
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args SecurePostureAcceptRiskArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SecurePostureAcceptRiskArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SecurePostureAcceptRiskArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SecurePostureAcceptRiskArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SecurePostureAcceptRiskArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var securePostureAcceptRiskResource = new Sysdig.SecurePostureAcceptRisk("securePostureAcceptRiskResource", new()
    {
        ControlName = "string",
        Description = "string",
        ExpiresIn = "string",
        Reason = "string",
        EndTime = "string",
        Filter = "string",
        Timeouts = new Sysdig.Inputs.SecurePostureAcceptRiskTimeoutsArgs
        {
            Create = "string",
        },
        ZoneName = "string",
    });
    
    example, err := sysdig.NewSecurePostureAcceptRisk(ctx, "securePostureAcceptRiskResource", &sysdig.SecurePostureAcceptRiskArgs{
    	ControlName: pulumi.String("string"),
    	Description: pulumi.String("string"),
    	ExpiresIn:   pulumi.String("string"),
    	Reason:      pulumi.String("string"),
    	EndTime:     pulumi.String("string"),
    	Filter:      pulumi.String("string"),
    	Timeouts: &sysdig.SecurePostureAcceptRiskTimeoutsArgs{
    		Create: pulumi.String("string"),
    	},
    	ZoneName: pulumi.String("string"),
    })
    
    var securePostureAcceptRiskResource = new SecurePostureAcceptRisk("securePostureAcceptRiskResource", SecurePostureAcceptRiskArgs.builder()
        .controlName("string")
        .description("string")
        .expiresIn("string")
        .reason("string")
        .endTime("string")
        .filter("string")
        .timeouts(SecurePostureAcceptRiskTimeoutsArgs.builder()
            .create("string")
            .build())
        .zoneName("string")
        .build());
    
    secure_posture_accept_risk_resource = sysdig.SecurePostureAcceptRisk("securePostureAcceptRiskResource",
        control_name="string",
        description="string",
        expires_in="string",
        reason="string",
        end_time="string",
        filter="string",
        timeouts={
            "create": "string",
        },
        zone_name="string")
    
    const securePostureAcceptRiskResource = new sysdig.SecurePostureAcceptRisk("securePostureAcceptRiskResource", {
        controlName: "string",
        description: "string",
        expiresIn: "string",
        reason: "string",
        endTime: "string",
        filter: "string",
        timeouts: {
            create: "string",
        },
        zoneName: "string",
    });
    
    type: sysdig:SecurePostureAcceptRisk
    properties:
        controlName: string
        description: string
        endTime: string
        expiresIn: string
        filter: string
        reason: string
        timeouts:
            create: string
        zoneName: string
    

    SecurePostureAcceptRisk Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The SecurePostureAcceptRisk resource accepts the following input properties:

    ControlName string
    The name of the posture control being accepted.
    Description string
    A description of the risk acceptance.
    ExpiresIn string
    Reason string
    EndTime string
    Filter string
    A filter for identifying the resources affected by the acceptance.
    Timeouts SecurePostureAcceptRiskTimeouts
    ZoneName string
    The zone associated with the risk acceptance.
    ControlName string
    The name of the posture control being accepted.
    Description string
    A description of the risk acceptance.
    ExpiresIn string
    Reason string
    EndTime string
    Filter string
    A filter for identifying the resources affected by the acceptance.
    Timeouts SecurePostureAcceptRiskTimeoutsArgs
    ZoneName string
    The zone associated with the risk acceptance.
    controlName String
    The name of the posture control being accepted.
    description String
    A description of the risk acceptance.
    expiresIn String
    reason String
    endTime String
    filter String
    A filter for identifying the resources affected by the acceptance.
    timeouts SecurePostureAcceptRiskTimeouts
    zoneName String
    The zone associated with the risk acceptance.
    controlName string
    The name of the posture control being accepted.
    description string
    A description of the risk acceptance.
    expiresIn string
    reason string
    endTime string
    filter string
    A filter for identifying the resources affected by the acceptance.
    timeouts SecurePostureAcceptRiskTimeouts
    zoneName string
    The zone associated with the risk acceptance.
    control_name str
    The name of the posture control being accepted.
    description str
    A description of the risk acceptance.
    expires_in str
    reason str
    end_time str
    filter str
    A filter for identifying the resources affected by the acceptance.
    timeouts SecurePostureAcceptRiskTimeoutsArgs
    zone_name str
    The zone associated with the risk acceptance.
    controlName String
    The name of the posture control being accepted.
    description String
    A description of the risk acceptance.
    expiresIn String
    reason String
    endTime String
    filter String
    A filter for identifying the resources affected by the acceptance.
    timeouts Property Map
    zoneName String
    The zone associated with the risk acceptance.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the SecurePostureAcceptRisk resource produces the following output properties:

    AcceptPeriod string
    AcceptanceDate double
    ExpiresAt string
    Id string
    The provider-assigned unique ID for this managed resource.
    IsExpired bool
    IsSystem bool
    Type string
    Username string
    AcceptPeriod string
    AcceptanceDate float64
    ExpiresAt string
    Id string
    The provider-assigned unique ID for this managed resource.
    IsExpired bool
    IsSystem bool
    Type string
    Username string
    acceptPeriod String
    acceptanceDate Double
    expiresAt String
    id String
    The provider-assigned unique ID for this managed resource.
    isExpired Boolean
    isSystem Boolean
    type String
    username String
    acceptPeriod string
    acceptanceDate number
    expiresAt string
    id string
    The provider-assigned unique ID for this managed resource.
    isExpired boolean
    isSystem boolean
    type string
    username string
    accept_period str
    acceptance_date float
    expires_at str
    id str
    The provider-assigned unique ID for this managed resource.
    is_expired bool
    is_system bool
    type str
    username str
    acceptPeriod String
    acceptanceDate Number
    expiresAt String
    id String
    The provider-assigned unique ID for this managed resource.
    isExpired Boolean
    isSystem Boolean
    type String
    username String

    Look up Existing SecurePostureAcceptRisk Resource

    Get an existing SecurePostureAcceptRisk resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: SecurePostureAcceptRiskState, opts?: CustomResourceOptions): SecurePostureAcceptRisk
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            accept_period: Optional[str] = None,
            acceptance_date: Optional[float] = None,
            control_name: Optional[str] = None,
            description: Optional[str] = None,
            end_time: Optional[str] = None,
            expires_at: Optional[str] = None,
            expires_in: Optional[str] = None,
            filter: Optional[str] = None,
            is_expired: Optional[bool] = None,
            is_system: Optional[bool] = None,
            reason: Optional[str] = None,
            timeouts: Optional[SecurePostureAcceptRiskTimeoutsArgs] = None,
            type: Optional[str] = None,
            username: Optional[str] = None,
            zone_name: Optional[str] = None) -> SecurePostureAcceptRisk
    func GetSecurePostureAcceptRisk(ctx *Context, name string, id IDInput, state *SecurePostureAcceptRiskState, opts ...ResourceOption) (*SecurePostureAcceptRisk, error)
    public static SecurePostureAcceptRisk Get(string name, Input<string> id, SecurePostureAcceptRiskState? state, CustomResourceOptions? opts = null)
    public static SecurePostureAcceptRisk get(String name, Output<String> id, SecurePostureAcceptRiskState state, CustomResourceOptions options)
    resources:  _:    type: sysdig:SecurePostureAcceptRisk    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AcceptPeriod string
    AcceptanceDate double
    ControlName string
    The name of the posture control being accepted.
    Description string
    A description of the risk acceptance.
    EndTime string
    ExpiresAt string
    ExpiresIn string
    Filter string
    A filter for identifying the resources affected by the acceptance.
    IsExpired bool
    IsSystem bool
    Reason string
    Timeouts SecurePostureAcceptRiskTimeouts
    Type string
    Username string
    ZoneName string
    The zone associated with the risk acceptance.
    AcceptPeriod string
    AcceptanceDate float64
    ControlName string
    The name of the posture control being accepted.
    Description string
    A description of the risk acceptance.
    EndTime string
    ExpiresAt string
    ExpiresIn string
    Filter string
    A filter for identifying the resources affected by the acceptance.
    IsExpired bool
    IsSystem bool
    Reason string
    Timeouts SecurePostureAcceptRiskTimeoutsArgs
    Type string
    Username string
    ZoneName string
    The zone associated with the risk acceptance.
    acceptPeriod String
    acceptanceDate Double
    controlName String
    The name of the posture control being accepted.
    description String
    A description of the risk acceptance.
    endTime String
    expiresAt String
    expiresIn String
    filter String
    A filter for identifying the resources affected by the acceptance.
    isExpired Boolean
    isSystem Boolean
    reason String
    timeouts SecurePostureAcceptRiskTimeouts
    type String
    username String
    zoneName String
    The zone associated with the risk acceptance.
    acceptPeriod string
    acceptanceDate number
    controlName string
    The name of the posture control being accepted.
    description string
    A description of the risk acceptance.
    endTime string
    expiresAt string
    expiresIn string
    filter string
    A filter for identifying the resources affected by the acceptance.
    isExpired boolean
    isSystem boolean
    reason string
    timeouts SecurePostureAcceptRiskTimeouts
    type string
    username string
    zoneName string
    The zone associated with the risk acceptance.
    accept_period str
    acceptance_date float
    control_name str
    The name of the posture control being accepted.
    description str
    A description of the risk acceptance.
    end_time str
    expires_at str
    expires_in str
    filter str
    A filter for identifying the resources affected by the acceptance.
    is_expired bool
    is_system bool
    reason str
    timeouts SecurePostureAcceptRiskTimeoutsArgs
    type str
    username str
    zone_name str
    The zone associated with the risk acceptance.
    acceptPeriod String
    acceptanceDate Number
    controlName String
    The name of the posture control being accepted.
    description String
    A description of the risk acceptance.
    endTime String
    expiresAt String
    expiresIn String
    filter String
    A filter for identifying the resources affected by the acceptance.
    isExpired Boolean
    isSystem Boolean
    reason String
    timeouts Property Map
    type String
    username String
    zoneName String
    The zone associated with the risk acceptance.

    Supporting Types

    SecurePostureAcceptRiskTimeouts, SecurePostureAcceptRiskTimeoutsArgs

    Create string
    Create string
    create String
    create string
    create str
    create String

    Import

    Posture accept risk can be imported using the ID, e.g.

    $ pulumi import sysdig:index/securePostureAcceptRisk:SecurePostureAcceptRisk example c 12345
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    sysdig sysdiglabs/terraform-provider-sysdig
    License
    Notes
    This Pulumi package is based on the sysdig Terraform Provider.
    sysdig logo
    sysdig 1.56.0 published on Wednesday, Apr 30, 2025 by sysdiglabs