thoth.governance.PackAssignment

Thoth v0.1.15, Jul 23 26

Viewing docs for Thoth v0.1.15
published on Thursday, Jul 23, 2026 by Aten Security

Schema (JSON)

atensecurity/pulumi-thoth

Viewing docs for Thoth v0.1.15
published on Thursday, Jul 23, 2026 by Aten Security

Schema (JSON)

atensecurity/pulumi-thoth

Create PackAssignment Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PackAssignment(name: string, args: PackAssignmentArgs, opts?: CustomResourceOptions);

@overload
def PackAssignment(resource_name: str,
                   args: PackAssignmentArgs,
                   opts: Optional[ResourceOptions] = None)

@overload
def PackAssignment(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   agent_id: Optional[str] = None,
                   pack_id: Optional[str] = None,
                   approval_policy_id: Optional[str] = None,
                   critical_threshold: Optional[float] = None,
                   delegation_boost: Optional[float] = None,
                   environment: Optional[str] = None,
                   mismatch_boost: Optional[float] = None,
                   overrides_json: Optional[str] = None,
                   trust_floor: Optional[float] = None)

func NewPackAssignment(ctx *Context, name string, args PackAssignmentArgs, opts ...ResourceOption) (*PackAssignment, error)

public PackAssignment(string name, PackAssignmentArgs args, CustomResourceOptions? opts = null)

public PackAssignment(String name, PackAssignmentArgs args)
public PackAssignment(String name, PackAssignmentArgs args, CustomResourceOptions options)

type: thoth:governance:PackAssignment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

resource "thoth_governance_pack_assignment" "name" {
    # resource properties
}

Parameters

name string: The unique name of the resource.
args PackAssignmentArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args PackAssignmentArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args PackAssignmentArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args PackAssignmentArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args PackAssignmentArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var packAssignmentResource = new Thoth.Governance.PackAssignment("packAssignmentResource", new()
{
    AgentId = "string",
    PackId = "string",
    ApprovalPolicyId = "string",
    CriticalThreshold = 0,
    DelegationBoost = 0,
    Environment = "string",
    MismatchBoost = 0,
    OverridesJson = "string",
    TrustFloor = 0,
});

example, err := governance.NewPackAssignment(ctx, "packAssignmentResource", &governance.PackAssignmentArgs{
	AgentId:           pulumi.String("string"),
	PackId:            pulumi.String("string"),
	ApprovalPolicyId:  pulumi.String("string"),
	CriticalThreshold: pulumi.Float64(0),
	DelegationBoost:   pulumi.Float64(0),
	Environment:       pulumi.String("string"),
	MismatchBoost:     pulumi.Float64(0),
	OverridesJson:     pulumi.String("string"),
	TrustFloor:        pulumi.Float64(0),
})

resource "thoth_governance_pack_assignment" "packAssignmentResource" {
  lifecycle {
    create_before_destroy = true
  }
  agent_id           = "string"
  pack_id            = "string"
  approval_policy_id = "string"
  critical_threshold = 0
  delegation_boost   = 0
  environment        = "string"
  mismatch_boost     = 0
  overrides_json     = "string"
  trust_floor        = 0
}

var packAssignmentResource = new PackAssignment("packAssignmentResource", PackAssignmentArgs.builder()
    .agentId("string")
    .packId("string")
    .approvalPolicyId("string")
    .criticalThreshold(0.0)
    .delegationBoost(0.0)
    .environment("string")
    .mismatchBoost(0.0)
    .overridesJson("string")
    .trustFloor(0.0)
    .build());

pack_assignment_resource = thoth.governance.PackAssignment("packAssignmentResource",
    agent_id="string",
    pack_id="string",
    approval_policy_id="string",
    critical_threshold=float(0),
    delegation_boost=float(0),
    environment="string",
    mismatch_boost=float(0),
    overrides_json="string",
    trust_floor=float(0))

const packAssignmentResource = new thoth.governance.PackAssignment("packAssignmentResource", {
    agentId: "string",
    packId: "string",
    approvalPolicyId: "string",
    criticalThreshold: 0,
    delegationBoost: 0,
    environment: "string",
    mismatchBoost: 0,
    overridesJson: "string",
    trustFloor: 0,
});

type: thoth:governance:PackAssignment
properties:
    agentId: string
    approvalPolicyId: string
    criticalThreshold: 0
    delegationBoost: 0
    environment: string
    mismatchBoost: 0
    overridesJson: string
    packId: string
    trustFloor: 0

PackAssignment Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PackAssignment resource accepts the following input properties:

AgentId string: Target agent ID.
PackId string: Compliance pack identifier.
ApprovalPolicyId string: Approval policy ID for pack application.
CriticalThreshold double: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
DelegationBoost double: Deterministic boost for delegation risk signals (0-100).
Environment string: Environment: dev or prod.
MismatchBoost double: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
OverridesJson string: Pack override JSON object.
TrustFloor double: Ignore low-confidence purpose/delegation signals below this floor (0-1).

AgentId string: Target agent ID.
PackId string: Compliance pack identifier.
ApprovalPolicyId string: Approval policy ID for pack application.
CriticalThreshold float64: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
DelegationBoost float64: Deterministic boost for delegation risk signals (0-100).
Environment string: Environment: dev or prod.
MismatchBoost float64: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
OverridesJson string: Pack override JSON object.
TrustFloor float64: Ignore low-confidence purpose/delegation signals below this floor (0-1).

agent_id string: Target agent ID.
pack_id string: Compliance pack identifier.
approval_policy_id string: Approval policy ID for pack application.
critical_threshold number: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
delegation_boost number: Deterministic boost for delegation risk signals (0-100).
environment string: Environment: dev or prod.
mismatch_boost number: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
overrides_json string: Pack override JSON object.
trust_floor number: Ignore low-confidence purpose/delegation signals below this floor (0-1).

agentId String: Target agent ID.
packId String: Compliance pack identifier.
approvalPolicyId String: Approval policy ID for pack application.
criticalThreshold Double: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
delegationBoost Double: Deterministic boost for delegation risk signals (0-100).
environment String: Environment: dev or prod.
mismatchBoost Double: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
overridesJson String: Pack override JSON object.
trustFloor Double: Ignore low-confidence purpose/delegation signals below this floor (0-1).

agentId string: Target agent ID.
packId string: Compliance pack identifier.
approvalPolicyId string: Approval policy ID for pack application.
criticalThreshold number: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
delegationBoost number: Deterministic boost for delegation risk signals (0-100).
environment string: Environment: dev or prod.
mismatchBoost number: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
overridesJson string: Pack override JSON object.
trustFloor number: Ignore low-confidence purpose/delegation signals below this floor (0-1).

agent_id str: Target agent ID.
pack_id str: Compliance pack identifier.
approval_policy_id str: Approval policy ID for pack application.
critical_threshold float: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
delegation_boost float: Deterministic boost for delegation risk signals (0-100).
environment str: Environment: dev or prod.
mismatch_boost float: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
overrides_json str: Pack override JSON object.
trust_floor float: Ignore low-confidence purpose/delegation signals below this floor (0-1).

agentId String: Target agent ID.
packId String: Compliance pack identifier.
approvalPolicyId String: Approval policy ID for pack application.
criticalThreshold Number: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
delegationBoost Number: Deterministic boost for delegation risk signals (0-100).
environment String: Environment: dev or prod.
mismatchBoost Number: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
overridesJson String: Pack override JSON object.
trustFloor Number: Ignore low-confidence purpose/delegation signals below this floor (0-1).

Outputs

All input properties are implicitly available as output properties. Additionally, the PackAssignment resource produces the following output properties:

AppliedAt string: Apply timestamp.
AppliedBy string: Principal that applied the pack.
Id string: The provider-assigned unique ID for this managed resource.
Regulation string: Regulation family for applied pack.
RevokedAt string: Revoke timestamp when assignment is removed.
RuleVersion int: Rule version applied by enforcer.
Status string: Current assignment status.
TenantId string: Tenant ID from provider configuration.

AppliedAt string: Apply timestamp.
AppliedBy string: Principal that applied the pack.
Id string: The provider-assigned unique ID for this managed resource.
Regulation string: Regulation family for applied pack.
RevokedAt string: Revoke timestamp when assignment is removed.
RuleVersion int: Rule version applied by enforcer.
Status string: Current assignment status.
TenantId string: Tenant ID from provider configuration.

applied_at string: Apply timestamp.
applied_by string: Principal that applied the pack.
id string: The provider-assigned unique ID for this managed resource.
regulation string: Regulation family for applied pack.
revoked_at string: Revoke timestamp when assignment is removed.
rule_version number: Rule version applied by enforcer.
status string: Current assignment status.
tenant_id string: Tenant ID from provider configuration.

appliedAt String: Apply timestamp.
appliedBy String: Principal that applied the pack.
id String: The provider-assigned unique ID for this managed resource.
regulation String: Regulation family for applied pack.
revokedAt String: Revoke timestamp when assignment is removed.
ruleVersion Integer: Rule version applied by enforcer.
status String: Current assignment status.
tenantId String: Tenant ID from provider configuration.

appliedAt string: Apply timestamp.
appliedBy string: Principal that applied the pack.
id string: The provider-assigned unique ID for this managed resource.
regulation string: Regulation family for applied pack.
revokedAt string: Revoke timestamp when assignment is removed.
ruleVersion number: Rule version applied by enforcer.
status string: Current assignment status.
tenantId string: Tenant ID from provider configuration.

applied_at str: Apply timestamp.
applied_by str: Principal that applied the pack.
id str: The provider-assigned unique ID for this managed resource.
regulation str: Regulation family for applied pack.
revoked_at str: Revoke timestamp when assignment is removed.
rule_version int: Rule version applied by enforcer.
status str: Current assignment status.
tenant_id str: Tenant ID from provider configuration.

appliedAt String: Apply timestamp.
appliedBy String: Principal that applied the pack.
id String: The provider-assigned unique ID for this managed resource.
regulation String: Regulation family for applied pack.
revokedAt String: Revoke timestamp when assignment is removed.
ruleVersion Number: Rule version applied by enforcer.
status String: Current assignment status.
tenantId String: Tenant ID from provider configuration.

Look up Existing PackAssignment Resource

Get an existing PackAssignment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: PackAssignmentState, opts?: CustomResourceOptions): PackAssignment

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        agent_id: Optional[str] = None,
        applied_at: Optional[str] = None,
        applied_by: Optional[str] = None,
        approval_policy_id: Optional[str] = None,
        critical_threshold: Optional[float] = None,
        delegation_boost: Optional[float] = None,
        environment: Optional[str] = None,
        mismatch_boost: Optional[float] = None,
        overrides_json: Optional[str] = None,
        pack_id: Optional[str] = None,
        regulation: Optional[str] = None,
        revoked_at: Optional[str] = None,
        rule_version: Optional[int] = None,
        status: Optional[str] = None,
        tenant_id: Optional[str] = None,
        trust_floor: Optional[float] = None) -> PackAssignment

func GetPackAssignment(ctx *Context, name string, id IDInput, state *PackAssignmentState, opts ...ResourceOption) (*PackAssignment, error)

public static PackAssignment Get(string name, Input<string> id, PackAssignmentState? state, CustomResourceOptions? opts = null)

public static PackAssignment get(String name, Output<String> id, PackAssignmentState state, CustomResourceOptions options)

resources:  _:    type: thoth:governance:PackAssignment    get:      id: ${id}

import {
  to = thoth_governance_pack_assignment.example
  id = "${id}"
}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AgentId string: Target agent ID.
AppliedAt string: Apply timestamp.
AppliedBy string: Principal that applied the pack.
ApprovalPolicyId string: Approval policy ID for pack application.
CriticalThreshold double: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
DelegationBoost double: Deterministic boost for delegation risk signals (0-100).
Environment string: Environment: dev or prod.
MismatchBoost double: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
OverridesJson string: Pack override JSON object.
PackId string: Compliance pack identifier.
Regulation string: Regulation family for applied pack.
RevokedAt string: Revoke timestamp when assignment is removed.
RuleVersion int: Rule version applied by enforcer.
Status string: Current assignment status.
TenantId string: Tenant ID from provider configuration.
TrustFloor double: Ignore low-confidence purpose/delegation signals below this floor (0-1).

AgentId string: Target agent ID.
AppliedAt string: Apply timestamp.
AppliedBy string: Principal that applied the pack.
ApprovalPolicyId string: Approval policy ID for pack application.
CriticalThreshold float64: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
DelegationBoost float64: Deterministic boost for delegation risk signals (0-100).
Environment string: Environment: dev or prod.
MismatchBoost float64: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
OverridesJson string: Pack override JSON object.
PackId string: Compliance pack identifier.
Regulation string: Regulation family for applied pack.
RevokedAt string: Revoke timestamp when assignment is removed.
RuleVersion int: Rule version applied by enforcer.
Status string: Current assignment status.
TenantId string: Tenant ID from provider configuration.
TrustFloor float64: Ignore low-confidence purpose/delegation signals below this floor (0-1).

agent_id string: Target agent ID.
applied_at string: Apply timestamp.
applied_by string: Principal that applied the pack.
approval_policy_id string: Approval policy ID for pack application.
critical_threshold number: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
delegation_boost number: Deterministic boost for delegation risk signals (0-100).
environment string: Environment: dev or prod.
mismatch_boost number: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
overrides_json string: Pack override JSON object.
pack_id string: Compliance pack identifier.
regulation string: Regulation family for applied pack.
revoked_at string: Revoke timestamp when assignment is removed.
rule_version number: Rule version applied by enforcer.
status string: Current assignment status.
tenant_id string: Tenant ID from provider configuration.
trust_floor number: Ignore low-confidence purpose/delegation signals below this floor (0-1).

agentId String: Target agent ID.
appliedAt String: Apply timestamp.
appliedBy String: Principal that applied the pack.
approvalPolicyId String: Approval policy ID for pack application.
criticalThreshold Double: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
delegationBoost Double: Deterministic boost for delegation risk signals (0-100).
environment String: Environment: dev or prod.
mismatchBoost Double: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
overridesJson String: Pack override JSON object.
packId String: Compliance pack identifier.
regulation String: Regulation family for applied pack.
revokedAt String: Revoke timestamp when assignment is removed.
ruleVersion Integer: Rule version applied by enforcer.
status String: Current assignment status.
tenantId String: Tenant ID from provider configuration.
trustFloor Double: Ignore low-confidence purpose/delegation signals below this floor (0-1).

agentId string: Target agent ID.
appliedAt string: Apply timestamp.
appliedBy string: Principal that applied the pack.
approvalPolicyId string: Approval policy ID for pack application.
criticalThreshold number: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
delegationBoost number: Deterministic boost for delegation risk signals (0-100).
environment string: Environment: dev or prod.
mismatchBoost number: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
overridesJson string: Pack override JSON object.
packId string: Compliance pack identifier.
regulation string: Regulation family for applied pack.
revokedAt string: Revoke timestamp when assignment is removed.
ruleVersion number: Rule version applied by enforcer.
status string: Current assignment status.
tenantId string: Tenant ID from provider configuration.
trustFloor number: Ignore low-confidence purpose/delegation signals below this floor (0-1).

agent_id str: Target agent ID.
applied_at str: Apply timestamp.
applied_by str: Principal that applied the pack.
approval_policy_id str: Approval policy ID for pack application.
critical_threshold float: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
delegation_boost float: Deterministic boost for delegation risk signals (0-100).
environment str: Environment: dev or prod.
mismatch_boost float: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
overrides_json str: Pack override JSON object.
pack_id str: Compliance pack identifier.
regulation str: Regulation family for applied pack.
revoked_at str: Revoke timestamp when assignment is removed.
rule_version int: Rule version applied by enforcer.
status str: Current assignment status.
tenant_id str: Tenant ID from provider configuration.
trust_floor float: Ignore low-confidence purpose/delegation signals below this floor (0-1).

agentId String: Target agent ID.
appliedAt String: Apply timestamp.
appliedBy String: Principal that applied the pack.
approvalPolicyId String: Approval policy ID for pack application.
criticalThreshold Number: Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
delegationBoost Number: Deterministic boost for delegation risk signals (0-100).
environment String: Environment: dev or prod.
mismatchBoost Number: Deterministic boost for purpose/sensitivity mismatch signals (0-100).
overridesJson String: Pack override JSON object.
packId String: Compliance pack identifier.
regulation String: Regulation family for applied pack.
revokedAt String: Revoke timestamp when assignment is removed.
ruleVersion Number: Rule version applied by enforcer.
status String: Current assignment status.
tenantId String: Tenant ID from provider configuration.
trustFloor Number: Ignore low-confidence purpose/delegation signals below this floor (0-1).

Package Details

Repository: thoth atensecurity/pulumi-thoth
License: Apache-2.0
Notes: This Pulumi package is based on the thoth Terraform Provider.

Viewing docs for Thoth v0.1.15
published on Thursday, Jul 23, 2026 by Aten Security

Schema (JSON)

atensecurity/pulumi-thoth

thoth.governance.PackAssignment

On this page

On this page

Create PackAssignment Resource

Constructor syntax

Parameters

Constructor example

PackAssignment Resource Properties

Inputs

Outputs

Look up Existing PackAssignment Resource

Package Details

On this page

On this page

Try Pulumi Cloud free.
Your team will thank you.

thoth.governance.PackAssignment

On this page

On this page

Create PackAssignment Resource

Constructor syntax

Parameters

Constructor example

PackAssignment Resource Properties

Inputs

Outputs

Look up Existing PackAssignment Resource

Package Details

On this page

On this page

Try Pulumi Cloud free.Your team will thank you.

Try Pulumi Cloud free.
Your team will thank you.