thoth.governance.PolicyException

Thoth v0.1.15, Jul 23 26

Viewing docs for Thoth v0.1.15
published on Thursday, Jul 23, 2026 by Aten Security

Schema (JSON)

atensecurity/pulumi-thoth

Viewing docs for Thoth v0.1.15
published on Thursday, Jul 23, 2026 by Aten Security

Schema (JSON)

atensecurity/pulumi-thoth

Create PolicyException Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PolicyException(name: string, args: PolicyExceptionArgs, opts?: CustomResourceOptions);

@overload
def PolicyException(resource_name: str,
                    args: PolicyExceptionArgs,
                    opts: Optional[ResourceOptions] = None)

@overload
def PolicyException(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    business_justification: Optional[str] = None,
                    data_sensitivity: Optional[str] = None,
                    frequency_estimate: Optional[str] = None,
                    requested_by: Optional[str] = None,
                    violation_id: Optional[str] = None,
                    agent_id: Optional[str] = None,
                    alternatives_considered: Optional[str] = None,
                    hold_token: Optional[str] = None,
                    request_id: Optional[str] = None,
                    tool_name: Optional[str] = None)

func NewPolicyException(ctx *Context, name string, args PolicyExceptionArgs, opts ...ResourceOption) (*PolicyException, error)

public PolicyException(string name, PolicyExceptionArgs args, CustomResourceOptions? opts = null)

public PolicyException(String name, PolicyExceptionArgs args)
public PolicyException(String name, PolicyExceptionArgs args, CustomResourceOptions options)

type: thoth:governance:PolicyException
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

resource "thoth_governance_policy_exception" "name" {
    # resource properties
}

Parameters

name string: The unique name of the resource.
args PolicyExceptionArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args PolicyExceptionArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args PolicyExceptionArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args PolicyExceptionArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args PolicyExceptionArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var policyExceptionResource = new Thoth.Governance.PolicyException("policyExceptionResource", new()
{
    BusinessJustification = "string",
    DataSensitivity = "string",
    FrequencyEstimate = "string",
    RequestedBy = "string",
    ViolationId = "string",
    AgentId = "string",
    AlternativesConsidered = "string",
    HoldToken = "string",
    RequestId = "string",
    ToolName = "string",
});

example, err := governance.NewPolicyException(ctx, "policyExceptionResource", &governance.PolicyExceptionArgs{
	BusinessJustification:  pulumi.String("string"),
	DataSensitivity:        pulumi.String("string"),
	FrequencyEstimate:      pulumi.String("string"),
	RequestedBy:            pulumi.String("string"),
	ViolationId:            pulumi.String("string"),
	AgentId:                pulumi.String("string"),
	AlternativesConsidered: pulumi.String("string"),
	HoldToken:              pulumi.String("string"),
	RequestId:              pulumi.String("string"),
	ToolName:               pulumi.String("string"),
})

resource "thoth_governance_policy_exception" "policyExceptionResource" {
  lifecycle {
    create_before_destroy = true
  }
  business_justification  = "string"
  data_sensitivity        = "string"
  frequency_estimate      = "string"
  requested_by            = "string"
  violation_id            = "string"
  agent_id                = "string"
  alternatives_considered = "string"
  hold_token              = "string"
  request_id              = "string"
  tool_name               = "string"
}

var policyExceptionResource = new PolicyException("policyExceptionResource", PolicyExceptionArgs.builder()
    .businessJustification("string")
    .dataSensitivity("string")
    .frequencyEstimate("string")
    .requestedBy("string")
    .violationId("string")
    .agentId("string")
    .alternativesConsidered("string")
    .holdToken("string")
    .requestId("string")
    .toolName("string")
    .build());

policy_exception_resource = thoth.governance.PolicyException("policyExceptionResource",
    business_justification="string",
    data_sensitivity="string",
    frequency_estimate="string",
    requested_by="string",
    violation_id="string",
    agent_id="string",
    alternatives_considered="string",
    hold_token="string",
    request_id="string",
    tool_name="string")

const policyExceptionResource = new thoth.governance.PolicyException("policyExceptionResource", {
    businessJustification: "string",
    dataSensitivity: "string",
    frequencyEstimate: "string",
    requestedBy: "string",
    violationId: "string",
    agentId: "string",
    alternativesConsidered: "string",
    holdToken: "string",
    requestId: "string",
    toolName: "string",
});

type: thoth:governance:PolicyException
properties:
    agentId: string
    alternativesConsidered: string
    businessJustification: string
    dataSensitivity: string
    frequencyEstimate: string
    holdToken: string
    requestId: string
    requestedBy: string
    toolName: string
    violationId: string

PolicyException Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PolicyException resource accepts the following input properties:

BusinessJustification string: Business reason for requesting the exception.
DataSensitivity string: Data sensitivity level touched by this exception.
FrequencyEstimate string: How often this exception is expected to occur.
RequestedBy string: Requester identity.
ViolationId string: Violation ID associated with this exception request.
AgentId string: Agent ID associated with the request.
AlternativesConsidered string: Optional alternatives reviewed before requesting an exception.
HoldToken string: Optional hold token when exception is tied to STEP_UP workflow.
RequestId string: Optional request ID. If omitted, enforcer generates one.
ToolName string: Tool/action name associated with the request.

BusinessJustification string: Business reason for requesting the exception.
DataSensitivity string: Data sensitivity level touched by this exception.
FrequencyEstimate string: How often this exception is expected to occur.
RequestedBy string: Requester identity.
ViolationId string: Violation ID associated with this exception request.
AgentId string: Agent ID associated with the request.
AlternativesConsidered string: Optional alternatives reviewed before requesting an exception.
HoldToken string: Optional hold token when exception is tied to STEP_UP workflow.
RequestId string: Optional request ID. If omitted, enforcer generates one.
ToolName string: Tool/action name associated with the request.

business_justification string: Business reason for requesting the exception.
data_sensitivity string: Data sensitivity level touched by this exception.
frequency_estimate string: How often this exception is expected to occur.
requested_by string: Requester identity.
violation_id string: Violation ID associated with this exception request.
agent_id string: Agent ID associated with the request.
alternatives_considered string: Optional alternatives reviewed before requesting an exception.
hold_token string: Optional hold token when exception is tied to STEP_UP workflow.
request_id string: Optional request ID. If omitted, enforcer generates one.
tool_name string: Tool/action name associated with the request.

businessJustification String: Business reason for requesting the exception.
dataSensitivity String: Data sensitivity level touched by this exception.
frequencyEstimate String: How often this exception is expected to occur.
requestedBy String: Requester identity.
violationId String: Violation ID associated with this exception request.
agentId String: Agent ID associated with the request.
alternativesConsidered String: Optional alternatives reviewed before requesting an exception.
holdToken String: Optional hold token when exception is tied to STEP_UP workflow.
requestId String: Optional request ID. If omitted, enforcer generates one.
toolName String: Tool/action name associated with the request.

businessJustification string: Business reason for requesting the exception.
dataSensitivity string: Data sensitivity level touched by this exception.
frequencyEstimate string: How often this exception is expected to occur.
requestedBy string: Requester identity.
violationId string: Violation ID associated with this exception request.
agentId string: Agent ID associated with the request.
alternativesConsidered string: Optional alternatives reviewed before requesting an exception.
holdToken string: Optional hold token when exception is tied to STEP_UP workflow.
requestId string: Optional request ID. If omitted, enforcer generates one.
toolName string: Tool/action name associated with the request.

business_justification str: Business reason for requesting the exception.
data_sensitivity str: Data sensitivity level touched by this exception.
frequency_estimate str: How often this exception is expected to occur.
requested_by str: Requester identity.
violation_id str: Violation ID associated with this exception request.
agent_id str: Agent ID associated with the request.
alternatives_considered str: Optional alternatives reviewed before requesting an exception.
hold_token str: Optional hold token when exception is tied to STEP_UP workflow.
request_id str: Optional request ID. If omitted, enforcer generates one.
tool_name str: Tool/action name associated with the request.

businessJustification String: Business reason for requesting the exception.
dataSensitivity String: Data sensitivity level touched by this exception.
frequencyEstimate String: How often this exception is expected to occur.
requestedBy String: Requester identity.
violationId String: Violation ID associated with this exception request.
agentId String: Agent ID associated with the request.
alternativesConsidered String: Optional alternatives reviewed before requesting an exception.
holdToken String: Optional hold token when exception is tied to STEP_UP workflow.
requestId String: Optional request ID. If omitted, enforcer generates one.
toolName String: Tool/action name associated with the request.

Outputs

All input properties are implicitly available as output properties. Additionally, the PolicyException resource produces the following output properties:

CreatedAt string: Creation timestamp.
Id string: The provider-assigned unique ID for this managed resource.
PolicyChangeJson string: Policy change metadata returned by the review flow.
ReviewDecision string: Review decision when present.
ReviewNotes string: Review notes when present.
ReviewedBy string: Reviewer identity when present.
Status string: Current policy exception status.
TenantId string: Tenant ID from provider configuration.
UpdatedAt string: Last update timestamp.

CreatedAt string: Creation timestamp.
Id string: The provider-assigned unique ID for this managed resource.
PolicyChangeJson string: Policy change metadata returned by the review flow.
ReviewDecision string: Review decision when present.
ReviewNotes string: Review notes when present.
ReviewedBy string: Reviewer identity when present.
Status string: Current policy exception status.
TenantId string: Tenant ID from provider configuration.
UpdatedAt string: Last update timestamp.

created_at string: Creation timestamp.
id string: The provider-assigned unique ID for this managed resource.
policy_change_json string: Policy change metadata returned by the review flow.
review_decision string: Review decision when present.
review_notes string: Review notes when present.
reviewed_by string: Reviewer identity when present.
status string: Current policy exception status.
tenant_id string: Tenant ID from provider configuration.
updated_at string: Last update timestamp.

createdAt String: Creation timestamp.
id String: The provider-assigned unique ID for this managed resource.
policyChangeJson String: Policy change metadata returned by the review flow.
reviewDecision String: Review decision when present.
reviewNotes String: Review notes when present.
reviewedBy String: Reviewer identity when present.
status String: Current policy exception status.
tenantId String: Tenant ID from provider configuration.
updatedAt String: Last update timestamp.

createdAt string: Creation timestamp.
id string: The provider-assigned unique ID for this managed resource.
policyChangeJson string: Policy change metadata returned by the review flow.
reviewDecision string: Review decision when present.
reviewNotes string: Review notes when present.
reviewedBy string: Reviewer identity when present.
status string: Current policy exception status.
tenantId string: Tenant ID from provider configuration.
updatedAt string: Last update timestamp.

created_at str: Creation timestamp.
id str: The provider-assigned unique ID for this managed resource.
policy_change_json str: Policy change metadata returned by the review flow.
review_decision str: Review decision when present.
review_notes str: Review notes when present.
reviewed_by str: Reviewer identity when present.
status str: Current policy exception status.
tenant_id str: Tenant ID from provider configuration.
updated_at str: Last update timestamp.

createdAt String: Creation timestamp.
id String: The provider-assigned unique ID for this managed resource.
policyChangeJson String: Policy change metadata returned by the review flow.
reviewDecision String: Review decision when present.
reviewNotes String: Review notes when present.
reviewedBy String: Reviewer identity when present.
status String: Current policy exception status.
tenantId String: Tenant ID from provider configuration.
updatedAt String: Last update timestamp.

Look up Existing PolicyException Resource

Get an existing PolicyException resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: PolicyExceptionState, opts?: CustomResourceOptions): PolicyException

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        agent_id: Optional[str] = None,
        alternatives_considered: Optional[str] = None,
        business_justification: Optional[str] = None,
        created_at: Optional[str] = None,
        data_sensitivity: Optional[str] = None,
        frequency_estimate: Optional[str] = None,
        hold_token: Optional[str] = None,
        policy_change_json: Optional[str] = None,
        request_id: Optional[str] = None,
        requested_by: Optional[str] = None,
        review_decision: Optional[str] = None,
        review_notes: Optional[str] = None,
        reviewed_by: Optional[str] = None,
        status: Optional[str] = None,
        tenant_id: Optional[str] = None,
        tool_name: Optional[str] = None,
        updated_at: Optional[str] = None,
        violation_id: Optional[str] = None) -> PolicyException

func GetPolicyException(ctx *Context, name string, id IDInput, state *PolicyExceptionState, opts ...ResourceOption) (*PolicyException, error)

public static PolicyException Get(string name, Input<string> id, PolicyExceptionState? state, CustomResourceOptions? opts = null)

public static PolicyException get(String name, Output<String> id, PolicyExceptionState state, CustomResourceOptions options)

resources:  _:    type: thoth:governance:PolicyException    get:      id: ${id}

import {
  to = thoth_governance_policy_exception.example
  id = "${id}"
}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AgentId string: Agent ID associated with the request.
AlternativesConsidered string: Optional alternatives reviewed before requesting an exception.
BusinessJustification string: Business reason for requesting the exception.
CreatedAt string: Creation timestamp.
DataSensitivity string: Data sensitivity level touched by this exception.
FrequencyEstimate string: How often this exception is expected to occur.
HoldToken string: Optional hold token when exception is tied to STEP_UP workflow.
PolicyChangeJson string: Policy change metadata returned by the review flow.
RequestId string: Optional request ID. If omitted, enforcer generates one.
RequestedBy string: Requester identity.
ReviewDecision string: Review decision when present.
ReviewNotes string: Review notes when present.
ReviewedBy string: Reviewer identity when present.
Status string: Current policy exception status.
TenantId string: Tenant ID from provider configuration.
ToolName string: Tool/action name associated with the request.
UpdatedAt string: Last update timestamp.
ViolationId string: Violation ID associated with this exception request.

AgentId string: Agent ID associated with the request.
AlternativesConsidered string: Optional alternatives reviewed before requesting an exception.
BusinessJustification string: Business reason for requesting the exception.
CreatedAt string: Creation timestamp.
DataSensitivity string: Data sensitivity level touched by this exception.
FrequencyEstimate string: How often this exception is expected to occur.
HoldToken string: Optional hold token when exception is tied to STEP_UP workflow.
PolicyChangeJson string: Policy change metadata returned by the review flow.
RequestId string: Optional request ID. If omitted, enforcer generates one.
RequestedBy string: Requester identity.
ReviewDecision string: Review decision when present.
ReviewNotes string: Review notes when present.
ReviewedBy string: Reviewer identity when present.
Status string: Current policy exception status.
TenantId string: Tenant ID from provider configuration.
ToolName string: Tool/action name associated with the request.
UpdatedAt string: Last update timestamp.
ViolationId string: Violation ID associated with this exception request.

agent_id string: Agent ID associated with the request.
alternatives_considered string: Optional alternatives reviewed before requesting an exception.
business_justification string: Business reason for requesting the exception.
created_at string: Creation timestamp.
data_sensitivity string: Data sensitivity level touched by this exception.
frequency_estimate string: How often this exception is expected to occur.
hold_token string: Optional hold token when exception is tied to STEP_UP workflow.
policy_change_json string: Policy change metadata returned by the review flow.
request_id string: Optional request ID. If omitted, enforcer generates one.
requested_by string: Requester identity.
review_decision string: Review decision when present.
review_notes string: Review notes when present.
reviewed_by string: Reviewer identity when present.
status string: Current policy exception status.
tenant_id string: Tenant ID from provider configuration.
tool_name string: Tool/action name associated with the request.
updated_at string: Last update timestamp.
violation_id string: Violation ID associated with this exception request.

agentId String: Agent ID associated with the request.
alternativesConsidered String: Optional alternatives reviewed before requesting an exception.
businessJustification String: Business reason for requesting the exception.
createdAt String: Creation timestamp.
dataSensitivity String: Data sensitivity level touched by this exception.
frequencyEstimate String: How often this exception is expected to occur.
holdToken String: Optional hold token when exception is tied to STEP_UP workflow.
policyChangeJson String: Policy change metadata returned by the review flow.
requestId String: Optional request ID. If omitted, enforcer generates one.
requestedBy String: Requester identity.
reviewDecision String: Review decision when present.
reviewNotes String: Review notes when present.
reviewedBy String: Reviewer identity when present.
status String: Current policy exception status.
tenantId String: Tenant ID from provider configuration.
toolName String: Tool/action name associated with the request.
updatedAt String: Last update timestamp.
violationId String: Violation ID associated with this exception request.

agentId string: Agent ID associated with the request.
alternativesConsidered string: Optional alternatives reviewed before requesting an exception.
businessJustification string: Business reason for requesting the exception.
createdAt string: Creation timestamp.
dataSensitivity string: Data sensitivity level touched by this exception.
frequencyEstimate string: How often this exception is expected to occur.
holdToken string: Optional hold token when exception is tied to STEP_UP workflow.
policyChangeJson string: Policy change metadata returned by the review flow.
requestId string: Optional request ID. If omitted, enforcer generates one.
requestedBy string: Requester identity.
reviewDecision string: Review decision when present.
reviewNotes string: Review notes when present.
reviewedBy string: Reviewer identity when present.
status string: Current policy exception status.
tenantId string: Tenant ID from provider configuration.
toolName string: Tool/action name associated with the request.
updatedAt string: Last update timestamp.
violationId string: Violation ID associated with this exception request.

agent_id str: Agent ID associated with the request.
alternatives_considered str: Optional alternatives reviewed before requesting an exception.
business_justification str: Business reason for requesting the exception.
created_at str: Creation timestamp.
data_sensitivity str: Data sensitivity level touched by this exception.
frequency_estimate str: How often this exception is expected to occur.
hold_token str: Optional hold token when exception is tied to STEP_UP workflow.
policy_change_json str: Policy change metadata returned by the review flow.
request_id str: Optional request ID. If omitted, enforcer generates one.
requested_by str: Requester identity.
review_decision str: Review decision when present.
review_notes str: Review notes when present.
reviewed_by str: Reviewer identity when present.
status str: Current policy exception status.
tenant_id str: Tenant ID from provider configuration.
tool_name str: Tool/action name associated with the request.
updated_at str: Last update timestamp.
violation_id str: Violation ID associated with this exception request.

agentId String: Agent ID associated with the request.
alternativesConsidered String: Optional alternatives reviewed before requesting an exception.
businessJustification String: Business reason for requesting the exception.
createdAt String: Creation timestamp.
dataSensitivity String: Data sensitivity level touched by this exception.
frequencyEstimate String: How often this exception is expected to occur.
holdToken String: Optional hold token when exception is tied to STEP_UP workflow.
policyChangeJson String: Policy change metadata returned by the review flow.
requestId String: Optional request ID. If omitted, enforcer generates one.
requestedBy String: Requester identity.
reviewDecision String: Review decision when present.
reviewNotes String: Review notes when present.
reviewedBy String: Reviewer identity when present.
status String: Current policy exception status.
tenantId String: Tenant ID from provider configuration.
toolName String: Tool/action name associated with the request.
updatedAt String: Last update timestamp.
violationId String: Violation ID associated with this exception request.

Package Details

Repository: thoth atensecurity/pulumi-thoth
License: Apache-2.0
Notes: This Pulumi package is based on the thoth Terraform Provider.

Viewing docs for Thoth v0.1.15
published on Thursday, Jul 23, 2026 by Aten Security

Schema (JSON)

atensecurity/pulumi-thoth

thoth.governance.PolicyException

On this page

On this page

Create PolicyException Resource

Constructor syntax

Parameters

Constructor example

PolicyException Resource Properties

Inputs

Outputs

Look up Existing PolicyException Resource

Package Details

On this page

On this page

Try Pulumi Cloud free.
Your team will thank you.

thoth.governance.PolicyException

On this page

On this page

Create PolicyException Resource

Constructor syntax

Parameters

Constructor example

PolicyException Resource Properties

Inputs

Outputs

Look up Existing PolicyException Resource

Package Details

On this page

On this page

Try Pulumi Cloud free.Your team will thank you.

Try Pulumi Cloud free.
Your team will thank you.