Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Thoth
  4. API Docs
  5. governance
  6. ToolClassification
Viewing docs for Thoth v0.1.22
published on Sunday, Oct 25, 2026 by Aten Security
Schema (JSON)
atensecurity/pulumi-thoth

thoth.governance.ToolClassification

thoth logo Thoth
Viewing docs for Thoth v0.1.22
published on Sunday, Oct 25, 2026 by Aten Security
Schema (JSON)
atensecurity/pulumi-thoth

    Create ToolClassification Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ToolClassification(name: string, args: ToolClassificationArgs, opts?: CustomResourceOptions);
    @overload
def ToolClassification(resource_name: str,
                       args: ToolClassificationArgs,
                       opts: Optional[ResourceOptions] = None)

@overload
def ToolClassification(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       classes: Optional[Sequence[str]] = None,
                       tool_name: Optional[str] = None,
                       acting_privilege: Optional[str] = None,
                       agent_id: Optional[str] = None,
                       target_sensitivity: Optional[str] = None)
    func NewToolClassification(ctx *Context, name string, args ToolClassificationArgs, opts ...ResourceOption) (*ToolClassification, error)
    public ToolClassification(string name, ToolClassificationArgs args, CustomResourceOptions? opts = null)
    public ToolClassification(String name, ToolClassificationArgs args)
public ToolClassification(String name, ToolClassificationArgs args, CustomResourceOptions options)

    type: thoth:governance:ToolClassification
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "thoth_governance_tool_classification" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ToolClassificationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ToolClassificationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ToolClassificationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ToolClassificationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ToolClassificationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var toolClassificationResource = new Thoth.Governance.ToolClassification("toolClassificationResource", new()
{
    Classes = new[]
    {
        "string",
    },
    ToolName = "string",
    ActingPrivilege = "string",
    AgentId = "string",
    TargetSensitivity = "string",
});

    example, err := governance.NewToolClassification(ctx, "toolClassificationResource", &governance.ToolClassificationArgs{
	Classes: pulumi.StringArray{
		pulumi.String("string"),
	},
	ToolName:          pulumi.String("string"),
	ActingPrivilege:   pulumi.String("string"),
	AgentId:           pulumi.String("string"),
	TargetSensitivity: pulumi.String("string"),
})

    resource "thoth_governance_tool_classification" "toolClassificationResource" {
  lifecycle {
    create_before_destroy = true
  }
  classes            = ["string"]
  tool_name          = "string"
  acting_privilege   = "string"
  agent_id           = "string"
  target_sensitivity = "string"
}

    var toolClassificationResource = new ToolClassification("toolClassificationResource", ToolClassificationArgs.builder()
    .classes("string")
    .toolName("string")
    .actingPrivilege("string")
    .agentId("string")
    .targetSensitivity("string")
    .build());

    tool_classification_resource = thoth.governance.ToolClassification("toolClassificationResource",
    classes=["string"],
    tool_name="string",
    acting_privilege="string",
    agent_id="string",
    target_sensitivity="string")

    const toolClassificationResource = new thoth.governance.ToolClassification("toolClassificationResource", {
    classes: ["string"],
    toolName: "string",
    actingPrivilege: "string",
    agentId: "string",
    targetSensitivity: "string",
});

    type: thoth:governance:ToolClassification
properties:
    actingPrivilege: string
    agentId: string
    classes:
        - string
    targetSensitivity: string
    toolName: string

    ToolClassification Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ToolClassification resource accepts the following input properties:

    Classes List<string>
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    ToolName string
    Exact tool name; wildcards are refused.
    ActingPrivilege string
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    AgentId string
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    TargetSensitivity string
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    Classes []string
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    ToolName string
    Exact tool name; wildcards are refused.
    ActingPrivilege string
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    AgentId string
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    TargetSensitivity string
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    classes list(string)
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    tool_name string
    Exact tool name; wildcards are refused.
    acting_privilege string
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    agent_id string
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    target_sensitivity string
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    classes List<String>
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    toolName String
    Exact tool name; wildcards are refused.
    actingPrivilege String
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    agentId String
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    targetSensitivity String
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    classes string[]
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    toolName string
    Exact tool name; wildcards are refused.
    actingPrivilege string
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    agentId string
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    targetSensitivity string
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    classes Sequence[str]
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    tool_name str
    Exact tool name; wildcards are refused.
    acting_privilege str
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    agent_id str
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    target_sensitivity str
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    classes List<String>
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    toolName String
    Exact tool name; wildcards are refused.
    actingPrivilege String
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    agentId String
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    targetSensitivity String
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ToolClassification resource produces the following output properties:

    CreatedAt string
    CreatedBy string
    Id string
    The provider-assigned unique ID for this managed resource.
    CreatedAt string
    CreatedBy string
    Id string
    The provider-assigned unique ID for this managed resource.
    created_at string
    created_by string
    id string
    The provider-assigned unique ID for this managed resource.
    createdAt String
    createdBy String
    id String
    The provider-assigned unique ID for this managed resource.
    createdAt string
    createdBy string
    id string
    The provider-assigned unique ID for this managed resource.
    created_at str
    created_by str
    id str
    The provider-assigned unique ID for this managed resource.
    createdAt String
    createdBy String
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ToolClassification Resource

    Get an existing ToolClassification resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ToolClassificationState, opts?: CustomResourceOptions): ToolClassification
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        acting_privilege: Optional[str] = None,
        agent_id: Optional[str] = None,
        classes: Optional[Sequence[str]] = None,
        created_at: Optional[str] = None,
        created_by: Optional[str] = None,
        target_sensitivity: Optional[str] = None,
        tool_name: Optional[str] = None) -> ToolClassification
    func GetToolClassification(ctx *Context, name string, id IDInput, state *ToolClassificationState, opts ...ResourceOption) (*ToolClassification, error)
    public static ToolClassification Get(string name, Input<string> id, ToolClassificationState? state, CustomResourceOptions? opts = null)
    public static ToolClassification get(String name, Output<String> id, ToolClassificationState state, CustomResourceOptions options)
    resources:  _:    type: thoth:governance:ToolClassification    get:      id: ${id}
    import {
  to = thoth_governance_tool_classification.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ActingPrivilege string
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    AgentId string
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    Classes List<string>
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    CreatedAt string
    CreatedBy string
    TargetSensitivity string
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    ToolName string
    Exact tool name; wildcards are refused.
    ActingPrivilege string
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    AgentId string
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    Classes []string
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    CreatedAt string
    CreatedBy string
    TargetSensitivity string
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    ToolName string
    Exact tool name; wildcards are refused.
    acting_privilege string
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    agent_id string
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    classes list(string)
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    created_at string
    created_by string
    target_sensitivity string
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    tool_name string
    Exact tool name; wildcards are refused.
    actingPrivilege String
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    agentId String
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    classes List<String>
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    createdAt String
    createdBy String
    targetSensitivity String
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    toolName String
    Exact tool name; wildcards are refused.
    actingPrivilege string
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    agentId string
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    classes string[]
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    createdAt string
    createdBy string
    targetSensitivity string
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    toolName string
    Exact tool name; wildcards are refused.
    acting_privilege str
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    agent_id str
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    classes Sequence[str]
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    created_at str
    created_by str
    target_sensitivity str
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    tool_name str
    Exact tool name; wildcards are refused.
    actingPrivilege String
    Privilege of the identity (credential) the tool acts with: standard, elevated or admin. Sent with each decision in the SIEM decision stream; does not change enforcement.
    agentId String
    Optional agent scope; omit for tenant-wide authority. Changing scope replaces the declaration.
    classes List<String>
    Reviewed effects: read, write, delete, execute, export, external_call, bulk_operation, credential_access, sensitive_data_access.
    createdAt String
    createdBy String
    targetSensitivity String
    How sensitive the tool's target is: public, internal, confidential or restricted. Sent with each decision in the SIEM decision stream; does not change enforcement.
    toolName String
    Exact tool name; wildcards are refused.

    Package Details

    Repository
    thoth atensecurity/pulumi-thoth
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the thoth Terraform Provider.
    thoth logo Thoth
    Viewing docs for Thoth v0.1.22
    published on Sunday, Oct 25, 2026 by Aten Security
    Schema (JSON)
    atensecurity/pulumi-thoth

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial