Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. assuredworkloads
  5. assuredworkloads/v1beta1
  6. getWorkload

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.assuredworkloads/v1beta1.getWorkload

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

    Gets Assured Workload associated with a CRM Node

    Using getWorkload

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getWorkload(args: GetWorkloadArgs, opts?: InvokeOptions): Promise<GetWorkloadResult>
function getWorkloadOutput(args: GetWorkloadOutputArgs, opts?: InvokeOptions): Output<GetWorkloadResult>
    def get_workload(location: Optional[str] = None,
                 organization_id: Optional[str] = None,
                 workload_id: Optional[str] = None,
                 opts: Optional[InvokeOptions] = None) -> GetWorkloadResult
def get_workload_output(location: Optional[pulumi.Input[str]] = None,
                 organization_id: Optional[pulumi.Input[str]] = None,
                 workload_id: Optional[pulumi.Input[str]] = None,
                 opts: Optional[InvokeOptions] = None) -> Output[GetWorkloadResult]
    func LookupWorkload(ctx *Context, args *LookupWorkloadArgs, opts ...InvokeOption) (*LookupWorkloadResult, error)
func LookupWorkloadOutput(ctx *Context, args *LookupWorkloadOutputArgs, opts ...InvokeOption) LookupWorkloadResultOutput

    > Note: This function is named LookupWorkload in the Go SDK.

    public static class GetWorkload 
{
    public static Task<GetWorkloadResult> InvokeAsync(GetWorkloadArgs args, InvokeOptions? opts = null)
    public static Output<GetWorkloadResult> Invoke(GetWorkloadInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetWorkloadResult> getWorkload(GetWorkloadArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet

    fn::invoke:
  function: google-native:assuredworkloads/v1beta1:getWorkload
  arguments:
    # arguments dictionary

    The following arguments are supported:

    getWorkload Result

    The following output properties are available:

    BillingAccount string
    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
    CjisSettings Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsResponse
    Input only. Immutable. Settings specific to resources needed for CJIS.
    ComplianceRegime string
    Immutable. Compliance Regime associated with this workload.
    ComplianceStatus Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse
    Count of active Violations in the Workload.
    CompliantButDisallowedServices List<string>
    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
    CreateTime string
    Immutable. The Workload creation timestamp.
    DisplayName string
    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
    EkmProvisioningResponse Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse
    Represents the Ekm Provisioning State of the given workload.
    EnableSovereignControls bool
    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
    Etag string
    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
    FedrampHighSettings Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsResponse
    Input only. Immutable. Settings specific to resources needed for FedRAMP High.
    FedrampModerateSettings Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsResponse
    Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
    Il4Settings Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsResponse
    Input only. Immutable. Settings specific to resources needed for IL4.
    KajEnrollmentState string
    Represents the KAJ enrollment state of the given workload.
    KmsSettings Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Labels Dictionary<string, string>
    Optional. Labels applied to the workload.
    Name string
    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
    Partner string
    Optional. Partner regime associated with this workload.
    PartnerPermissions Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsResponse
    Optional. Permissions granted to the AW Partner SA account for the customer workload
    ProvisionedResourcesParent string
    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
    ResourceMonitoringEnabled bool
    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
    ResourceSettings List<Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResponse>
    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
    Resources List<Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse>
    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
    SaaEnrollmentResponse Pulumi.GoogleNative.AssuredWorkloads.V1Beta1.Outputs.GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse
    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
    ViolationNotificationsEnabled bool
    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
    BillingAccount string
    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
    CjisSettings GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsResponse
    Input only. Immutable. Settings specific to resources needed for CJIS.
    ComplianceRegime string
    Immutable. Compliance Regime associated with this workload.
    ComplianceStatus GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse
    Count of active Violations in the Workload.
    CompliantButDisallowedServices []string
    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
    CreateTime string
    Immutable. The Workload creation timestamp.
    DisplayName string
    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
    EkmProvisioningResponse GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse
    Represents the Ekm Provisioning State of the given workload.
    EnableSovereignControls bool
    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
    Etag string
    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
    FedrampHighSettings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsResponse
    Input only. Immutable. Settings specific to resources needed for FedRAMP High.
    FedrampModerateSettings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsResponse
    Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
    Il4Settings GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsResponse
    Input only. Immutable. Settings specific to resources needed for IL4.
    KajEnrollmentState string
    Represents the KAJ enrollment state of the given workload.
    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Labels map[string]string
    Optional. Labels applied to the workload.
    Name string
    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
    Partner string
    Optional. Partner regime associated with this workload.
    PartnerPermissions GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsResponse
    Optional. Permissions granted to the AW Partner SA account for the customer workload
    ProvisionedResourcesParent string
    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
    ResourceMonitoringEnabled bool
    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
    ResourceSettings []GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResponse
    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
    Resources []GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse
    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
    SaaEnrollmentResponse GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse
    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
    ViolationNotificationsEnabled bool
    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
    billingAccount String
    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
    cjisSettings GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsResponse
    Input only. Immutable. Settings specific to resources needed for CJIS.
    complianceRegime String
    Immutable. Compliance Regime associated with this workload.
    complianceStatus GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse
    Count of active Violations in the Workload.
    compliantButDisallowedServices List<String>
    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
    createTime String
    Immutable. The Workload creation timestamp.
    displayName String
    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
    ekmProvisioningResponse GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse
    Represents the Ekm Provisioning State of the given workload.
    enableSovereignControls Boolean
    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
    etag String
    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
    fedrampHighSettings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsResponse
    Input only. Immutable. Settings specific to resources needed for FedRAMP High.
    fedrampModerateSettings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsResponse
    Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
    il4Settings GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsResponse
    Input only. Immutable. Settings specific to resources needed for IL4.
    kajEnrollmentState String
    Represents the KAJ enrollment state of the given workload.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    labels Map<String,String>
    Optional. Labels applied to the workload.
    name String
    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
    partner String
    Optional. Partner regime associated with this workload.
    partnerPermissions GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsResponse
    Optional. Permissions granted to the AW Partner SA account for the customer workload
    provisionedResourcesParent String
    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
    resourceMonitoringEnabled Boolean
    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
    resourceSettings List<GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResponse>
    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
    resources List<GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse>
    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
    saaEnrollmentResponse GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse
    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
    violationNotificationsEnabled Boolean
    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
    billingAccount string
    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
    cjisSettings GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsResponse
    Input only. Immutable. Settings specific to resources needed for CJIS.
    complianceRegime string
    Immutable. Compliance Regime associated with this workload.
    complianceStatus GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse
    Count of active Violations in the Workload.
    compliantButDisallowedServices string[]
    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
    createTime string
    Immutable. The Workload creation timestamp.
    displayName string
    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
    ekmProvisioningResponse GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse
    Represents the Ekm Provisioning State of the given workload.
    enableSovereignControls boolean
    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
    etag string
    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
    fedrampHighSettings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsResponse
    Input only. Immutable. Settings specific to resources needed for FedRAMP High.
    fedrampModerateSettings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsResponse
    Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
    il4Settings GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsResponse
    Input only. Immutable. Settings specific to resources needed for IL4.
    kajEnrollmentState string
    Represents the KAJ enrollment state of the given workload.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    labels {[key: string]: string}
    Optional. Labels applied to the workload.
    name string
    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
    partner string
    Optional. Partner regime associated with this workload.
    partnerPermissions GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsResponse
    Optional. Permissions granted to the AW Partner SA account for the customer workload
    provisionedResourcesParent string
    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
    resourceMonitoringEnabled boolean
    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
    resourceSettings GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResponse[]
    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
    resources GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse[]
    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
    saaEnrollmentResponse GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse
    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
    violationNotificationsEnabled boolean
    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
    billing_account str
    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
    cjis_settings GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsResponse
    Input only. Immutable. Settings specific to resources needed for CJIS.
    compliance_regime str
    Immutable. Compliance Regime associated with this workload.
    compliance_status GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse
    Count of active Violations in the Workload.
    compliant_but_disallowed_services Sequence[str]
    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
    create_time str
    Immutable. The Workload creation timestamp.
    display_name str
    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
    ekm_provisioning_response GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse
    Represents the Ekm Provisioning State of the given workload.
    enable_sovereign_controls bool
    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
    etag str
    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
    fedramp_high_settings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsResponse
    Input only. Immutable. Settings specific to resources needed for FedRAMP High.
    fedramp_moderate_settings GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsResponse
    Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
    il4_settings GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsResponse
    Input only. Immutable. Settings specific to resources needed for IL4.
    kaj_enrollment_state str
    Represents the KAJ enrollment state of the given workload.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    labels Mapping[str, str]
    Optional. Labels applied to the workload.
    name str
    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
    partner str
    Optional. Partner regime associated with this workload.
    partner_permissions GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsResponse
    Optional. Permissions granted to the AW Partner SA account for the customer workload
    provisioned_resources_parent str
    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
    resource_monitoring_enabled bool
    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
    resource_settings Sequence[GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResponse]
    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
    resources Sequence[GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse]
    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
    saa_enrollment_response GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse
    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
    violation_notifications_enabled bool
    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
    billingAccount String
    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
    cjisSettings Property Map
    Input only. Immutable. Settings specific to resources needed for CJIS.
    complianceRegime String
    Immutable. Compliance Regime associated with this workload.
    complianceStatus Property Map
    Count of active Violations in the Workload.
    compliantButDisallowedServices List<String>
    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
    createTime String
    Immutable. The Workload creation timestamp.
    displayName String
    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
    ekmProvisioningResponse Property Map
    Represents the Ekm Provisioning State of the given workload.
    enableSovereignControls Boolean
    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
    etag String
    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
    fedrampHighSettings Property Map
    Input only. Immutable. Settings specific to resources needed for FedRAMP High.
    fedrampModerateSettings Property Map
    Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
    il4Settings Property Map
    Input only. Immutable. Settings specific to resources needed for IL4.
    kajEnrollmentState String
    Represents the KAJ enrollment state of the given workload.
    kmsSettings Property Map
    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    labels Map<String>
    Optional. Labels applied to the workload.
    name String
    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
    partner String
    Optional. Partner regime associated with this workload.
    partnerPermissions Property Map
    Optional. Permissions granted to the AW Partner SA account for the customer workload
    provisionedResourcesParent String
    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
    resourceMonitoringEnabled Boolean
    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
    resourceSettings List<Property Map>
    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
    resources List<Property Map>
    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
    saaEnrollmentResponse Property Map
    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
    violationNotificationsEnabled Boolean
    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.

    Supporting Types

    GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsResponse

    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings Property Map
    Input only. Immutable. Settings used to create a CMEK crypto key.

    GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse

    AcknowledgedResourceViolationCount int
    Number of current resource violations which are not acknowledged.
    AcknowledgedViolationCount int
    Number of current orgPolicy violations which are acknowledged.
    ActiveResourceViolationCount int
    Number of current resource violations which are acknowledged.
    ActiveViolationCount int
    Number of current orgPolicy violations which are not acknowledged.
    AcknowledgedResourceViolationCount int
    Number of current resource violations which are not acknowledged.
    AcknowledgedViolationCount int
    Number of current orgPolicy violations which are acknowledged.
    ActiveResourceViolationCount int
    Number of current resource violations which are acknowledged.
    ActiveViolationCount int
    Number of current orgPolicy violations which are not acknowledged.
    acknowledgedResourceViolationCount Integer
    Number of current resource violations which are not acknowledged.
    acknowledgedViolationCount Integer
    Number of current orgPolicy violations which are acknowledged.
    activeResourceViolationCount Integer
    Number of current resource violations which are acknowledged.
    activeViolationCount Integer
    Number of current orgPolicy violations which are not acknowledged.
    acknowledgedResourceViolationCount number
    Number of current resource violations which are not acknowledged.
    acknowledgedViolationCount number
    Number of current orgPolicy violations which are acknowledged.
    activeResourceViolationCount number
    Number of current resource violations which are acknowledged.
    activeViolationCount number
    Number of current orgPolicy violations which are not acknowledged.
    acknowledged_resource_violation_count int
    Number of current resource violations which are not acknowledged.
    acknowledged_violation_count int
    Number of current orgPolicy violations which are acknowledged.
    active_resource_violation_count int
    Number of current resource violations which are acknowledged.
    active_violation_count int
    Number of current orgPolicy violations which are not acknowledged.
    acknowledgedResourceViolationCount Number
    Number of current resource violations which are not acknowledged.
    acknowledgedViolationCount Number
    Number of current orgPolicy violations which are acknowledged.
    activeResourceViolationCount Number
    Number of current resource violations which are acknowledged.
    activeViolationCount Number
    Number of current orgPolicy violations which are not acknowledged.

    GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse

    EkmProvisioningErrorDomain string
    Indicates Ekm provisioning error if any.
    EkmProvisioningErrorMapping string
    Detailed error message if Ekm provisioning fails
    EkmProvisioningState string
    Indicates Ekm enrollment Provisioning of a given workload.
    EkmProvisioningErrorDomain string
    Indicates Ekm provisioning error if any.
    EkmProvisioningErrorMapping string
    Detailed error message if Ekm provisioning fails
    EkmProvisioningState string
    Indicates Ekm enrollment Provisioning of a given workload.
    ekmProvisioningErrorDomain String
    Indicates Ekm provisioning error if any.
    ekmProvisioningErrorMapping String
    Detailed error message if Ekm provisioning fails
    ekmProvisioningState String
    Indicates Ekm enrollment Provisioning of a given workload.
    ekmProvisioningErrorDomain string
    Indicates Ekm provisioning error if any.
    ekmProvisioningErrorMapping string
    Detailed error message if Ekm provisioning fails
    ekmProvisioningState string
    Indicates Ekm enrollment Provisioning of a given workload.
    ekm_provisioning_error_domain str
    Indicates Ekm provisioning error if any.
    ekm_provisioning_error_mapping str
    Detailed error message if Ekm provisioning fails
    ekm_provisioning_state str
    Indicates Ekm enrollment Provisioning of a given workload.
    ekmProvisioningErrorDomain String
    Indicates Ekm provisioning error if any.
    ekmProvisioningErrorMapping String
    Detailed error message if Ekm provisioning fails
    ekmProvisioningState String
    Indicates Ekm enrollment Provisioning of a given workload.

    GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsResponse

    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings Property Map
    Input only. Immutable. Settings used to create a CMEK crypto key.

    GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsResponse

    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings Property Map
    Input only. Immutable. Settings used to create a CMEK crypto key.

    GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsResponse

    KmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kms_settings GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse
    Input only. Immutable. Settings used to create a CMEK crypto key.
    kmsSettings Property Map
    Input only. Immutable. Settings used to create a CMEK crypto key.

    GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse

    NextRotationTime string
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    RotationPeriod string
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    NextRotationTime string
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    RotationPeriod string
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    nextRotationTime String
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    rotationPeriod String
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    nextRotationTime string
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    rotationPeriod string
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    next_rotation_time str
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    rotation_period str
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
    nextRotationTime String
    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
    rotationPeriod String
    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsResponse

    AssuredWorkloadsMonitoring bool
    Optional. Allow partner to view violation alerts.
    DataLogsViewer bool
    Allow the partner to view inspectability logs and monitoring violations.
    ServiceAccessApprover bool
    Optional. Allow partner to view access approval logs.
    AssuredWorkloadsMonitoring bool
    Optional. Allow partner to view violation alerts.
    DataLogsViewer bool
    Allow the partner to view inspectability logs and monitoring violations.
    ServiceAccessApprover bool
    Optional. Allow partner to view access approval logs.
    assuredWorkloadsMonitoring Boolean
    Optional. Allow partner to view violation alerts.
    dataLogsViewer Boolean
    Allow the partner to view inspectability logs and monitoring violations.
    serviceAccessApprover Boolean
    Optional. Allow partner to view access approval logs.
    assuredWorkloadsMonitoring boolean
    Optional. Allow partner to view violation alerts.
    dataLogsViewer boolean
    Allow the partner to view inspectability logs and monitoring violations.
    serviceAccessApprover boolean
    Optional. Allow partner to view access approval logs.
    assured_workloads_monitoring bool
    Optional. Allow partner to view violation alerts.
    data_logs_viewer bool
    Allow the partner to view inspectability logs and monitoring violations.
    service_access_approver bool
    Optional. Allow partner to view access approval logs.
    assuredWorkloadsMonitoring Boolean
    Optional. Allow partner to view violation alerts.
    dataLogsViewer Boolean
    Allow the partner to view inspectability logs and monitoring violations.
    serviceAccessApprover Boolean
    Optional. Allow partner to view access approval logs.

    GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse

    ResourceId string
    Resource identifier. For a project this represents project_number.
    ResourceType string
    Indicates the type of resource.
    ResourceId string
    Resource identifier. For a project this represents project_number.
    ResourceType string
    Indicates the type of resource.
    resourceId String
    Resource identifier. For a project this represents project_number.
    resourceType String
    Indicates the type of resource.
    resourceId string
    Resource identifier. For a project this represents project_number.
    resourceType string
    Indicates the type of resource.
    resource_id str
    Resource identifier. For a project this represents project_number.
    resource_type str
    Indicates the type of resource.
    resourceId String
    Resource identifier. For a project this represents project_number.
    resourceType String
    Indicates the type of resource.

    GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResponse

    DisplayName string
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    ResourceId string
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    ResourceType string
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    DisplayName string
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    ResourceId string
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    ResourceType string
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    displayName String
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    resourceId String
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    resourceType String
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    displayName string
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    resourceId string
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    resourceType string
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    display_name str
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    resource_id str
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    resource_type str
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
    displayName String
    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
    resourceId String
    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
    resourceType String
    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse

    SetupErrors List<string>
    Indicates SAA enrollment setup error if any.
    SetupStatus string
    Indicates SAA enrollment status of a given workload.
    SetupErrors []string
    Indicates SAA enrollment setup error if any.
    SetupStatus string
    Indicates SAA enrollment status of a given workload.
    setupErrors List<String>
    Indicates SAA enrollment setup error if any.
    setupStatus String
    Indicates SAA enrollment status of a given workload.
    setupErrors string[]
    Indicates SAA enrollment setup error if any.
    setupStatus string
    Indicates SAA enrollment status of a given workload.
    setup_errors Sequence[str]
    Indicates SAA enrollment setup error if any.
    setup_status str
    Indicates SAA enrollment status of a given workload.
    setupErrors List<String>
    Indicates SAA enrollment setup error if any.
    setupStatus String
    Indicates SAA enrollment status of a given workload.

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
    pulumi/pulumi-google-native