Google Cloud Native is in preview. Google Cloud Classic is fully supported.
google-native.assuredworkloads/v1beta1.Workload
Explore with Pulumi AI
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Creates Assured Workload.
Create Workload Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Workload(name: string, args: WorkloadArgs, opts?: CustomResourceOptions);
@overload
def Workload(resource_name: str,
args: WorkloadArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Workload(resource_name: str,
opts: Optional[ResourceOptions] = None,
display_name: Optional[str] = None,
organization_id: Optional[str] = None,
compliance_regime: Optional[WorkloadComplianceRegime] = None,
kms_settings: Optional[GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs] = None,
location: Optional[str] = None,
etag: Optional[str] = None,
external_id: Optional[str] = None,
fedramp_high_settings: Optional[GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs] = None,
fedramp_moderate_settings: Optional[GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs] = None,
il4_settings: Optional[GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs] = None,
billing_account: Optional[str] = None,
labels: Optional[Mapping[str, str]] = None,
enable_sovereign_controls: Optional[bool] = None,
name: Optional[str] = None,
cjis_settings: Optional[GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs] = None,
partner: Optional[WorkloadPartner] = None,
partner_permissions: Optional[GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs] = None,
provisioned_resources_parent: Optional[str] = None,
resource_settings: Optional[Sequence[GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs]] = None,
violation_notifications_enabled: Optional[bool] = None)
func NewWorkload(ctx *Context, name string, args WorkloadArgs, opts ...ResourceOption) (*Workload, error)
public Workload(string name, WorkloadArgs args, CustomResourceOptions? opts = null)
public Workload(String name, WorkloadArgs args)
public Workload(String name, WorkloadArgs args, CustomResourceOptions options)
type: google-native:assuredworkloads/v1beta1:Workload
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args WorkloadArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args WorkloadArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args WorkloadArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args WorkloadArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args WorkloadArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var google_nativeWorkloadResource = new GoogleNative.AssuredWorkloads.V1Beta1.Workload("google-nativeWorkloadResource", new()
{
DisplayName = "string",
OrganizationId = "string",
ComplianceRegime = GoogleNative.AssuredWorkloads.V1Beta1.WorkloadComplianceRegime.ComplianceRegimeUnspecified,
Location = "string",
Etag = "string",
ExternalId = "string",
FedrampHighSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs
{
KmsSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs
{
NextRotationTime = "string",
RotationPeriod = "string",
},
},
FedrampModerateSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs
{
KmsSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs
{
NextRotationTime = "string",
RotationPeriod = "string",
},
},
Il4Settings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs
{
KmsSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs
{
NextRotationTime = "string",
RotationPeriod = "string",
},
},
BillingAccount = "string",
Labels =
{
{ "string", "string" },
},
EnableSovereignControls = false,
Name = "string",
CjisSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs
{
KmsSettings = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs
{
NextRotationTime = "string",
RotationPeriod = "string",
},
},
Partner = GoogleNative.AssuredWorkloads.V1Beta1.WorkloadPartner.PartnerUnspecified,
PartnerPermissions = new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs
{
AssuredWorkloadsMonitoring = false,
DataLogsViewer = false,
ServiceAccessApprover = false,
},
ProvisionedResourcesParent = "string",
ResourceSettings = new[]
{
new GoogleNative.AssuredWorkloads.V1Beta1.Inputs.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs
{
DisplayName = "string",
ResourceId = "string",
ResourceType = GoogleNative.AssuredWorkloads.V1Beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType.ResourceTypeUnspecified,
},
},
ViolationNotificationsEnabled = false,
});
example, err := assuredworkloadsv1beta1.NewWorkload(ctx, "google-nativeWorkloadResource", &assuredworkloadsv1beta1.WorkloadArgs{
DisplayName: pulumi.String("string"),
OrganizationId: pulumi.String("string"),
ComplianceRegime: assuredworkloadsv1beta1.WorkloadComplianceRegimeComplianceRegimeUnspecified,
Location: pulumi.String("string"),
Etag: pulumi.String("string"),
ExternalId: pulumi.String("string"),
FedrampHighSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs{
KmsSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs{
NextRotationTime: pulumi.String("string"),
RotationPeriod: pulumi.String("string"),
},
},
FedrampModerateSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs{
KmsSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs{
NextRotationTime: pulumi.String("string"),
RotationPeriod: pulumi.String("string"),
},
},
Il4Settings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs{
KmsSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs{
NextRotationTime: pulumi.String("string"),
RotationPeriod: pulumi.String("string"),
},
},
BillingAccount: pulumi.String("string"),
Labels: pulumi.StringMap{
"string": pulumi.String("string"),
},
EnableSovereignControls: pulumi.Bool(false),
Name: pulumi.String("string"),
CjisSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs{
KmsSettings: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs{
NextRotationTime: pulumi.String("string"),
RotationPeriod: pulumi.String("string"),
},
},
Partner: assuredworkloadsv1beta1.WorkloadPartnerPartnerUnspecified,
PartnerPermissions: &assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs{
AssuredWorkloadsMonitoring: pulumi.Bool(false),
DataLogsViewer: pulumi.Bool(false),
ServiceAccessApprover: pulumi.Bool(false),
},
ProvisionedResourcesParent: pulumi.String("string"),
ResourceSettings: assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArray{
&assuredworkloads.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs{
DisplayName: pulumi.String("string"),
ResourceId: pulumi.String("string"),
ResourceType: assuredworkloadsv1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceTypeResourceTypeUnspecified,
},
},
ViolationNotificationsEnabled: pulumi.Bool(false),
})
var google_nativeWorkloadResource = new Workload("google-nativeWorkloadResource", WorkloadArgs.builder()
.displayName("string")
.organizationId("string")
.complianceRegime("COMPLIANCE_REGIME_UNSPECIFIED")
.location("string")
.etag("string")
.externalId("string")
.fedrampHighSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs.builder()
.kmsSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs.builder()
.nextRotationTime("string")
.rotationPeriod("string")
.build())
.build())
.fedrampModerateSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs.builder()
.kmsSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs.builder()
.nextRotationTime("string")
.rotationPeriod("string")
.build())
.build())
.il4Settings(GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs.builder()
.kmsSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs.builder()
.nextRotationTime("string")
.rotationPeriod("string")
.build())
.build())
.billingAccount("string")
.labels(Map.of("string", "string"))
.enableSovereignControls(false)
.name("string")
.cjisSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs.builder()
.kmsSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs.builder()
.nextRotationTime("string")
.rotationPeriod("string")
.build())
.build())
.partner("PARTNER_UNSPECIFIED")
.partnerPermissions(GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs.builder()
.assuredWorkloadsMonitoring(false)
.dataLogsViewer(false)
.serviceAccessApprover(false)
.build())
.provisionedResourcesParent("string")
.resourceSettings(GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs.builder()
.displayName("string")
.resourceId("string")
.resourceType("RESOURCE_TYPE_UNSPECIFIED")
.build())
.violationNotificationsEnabled(false)
.build());
google_native_workload_resource = google_native.assuredworkloads.v1beta1.Workload("google-nativeWorkloadResource",
display_name="string",
organization_id="string",
compliance_regime=google_native.assuredworkloads.v1beta1.WorkloadComplianceRegime.COMPLIANCE_REGIME_UNSPECIFIED,
location="string",
etag="string",
external_id="string",
fedramp_high_settings=google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs(
kms_settings=google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs(
next_rotation_time="string",
rotation_period="string",
),
),
fedramp_moderate_settings=google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs(
kms_settings=google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs(
next_rotation_time="string",
rotation_period="string",
),
),
il4_settings=google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs(
kms_settings=google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs(
next_rotation_time="string",
rotation_period="string",
),
),
billing_account="string",
labels={
"string": "string",
},
enable_sovereign_controls=False,
name="string",
cjis_settings=google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs(
kms_settings=google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs(
next_rotation_time="string",
rotation_period="string",
),
),
partner=google_native.assuredworkloads.v1beta1.WorkloadPartner.PARTNER_UNSPECIFIED,
partner_permissions=google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs(
assured_workloads_monitoring=False,
data_logs_viewer=False,
service_access_approver=False,
),
provisioned_resources_parent="string",
resource_settings=[google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs(
display_name="string",
resource_id="string",
resource_type=google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType.RESOURCE_TYPE_UNSPECIFIED,
)],
violation_notifications_enabled=False)
const google_nativeWorkloadResource = new google_native.assuredworkloads.v1beta1.Workload("google-nativeWorkloadResource", {
displayName: "string",
organizationId: "string",
complianceRegime: google_native.assuredworkloads.v1beta1.WorkloadComplianceRegime.ComplianceRegimeUnspecified,
location: "string",
etag: "string",
externalId: "string",
fedrampHighSettings: {
kmsSettings: {
nextRotationTime: "string",
rotationPeriod: "string",
},
},
fedrampModerateSettings: {
kmsSettings: {
nextRotationTime: "string",
rotationPeriod: "string",
},
},
il4Settings: {
kmsSettings: {
nextRotationTime: "string",
rotationPeriod: "string",
},
},
billingAccount: "string",
labels: {
string: "string",
},
enableSovereignControls: false,
name: "string",
cjisSettings: {
kmsSettings: {
nextRotationTime: "string",
rotationPeriod: "string",
},
},
partner: google_native.assuredworkloads.v1beta1.WorkloadPartner.PartnerUnspecified,
partnerPermissions: {
assuredWorkloadsMonitoring: false,
dataLogsViewer: false,
serviceAccessApprover: false,
},
provisionedResourcesParent: "string",
resourceSettings: [{
displayName: "string",
resourceId: "string",
resourceType: google_native.assuredworkloads.v1beta1.GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType.ResourceTypeUnspecified,
}],
violationNotificationsEnabled: false,
});
type: google-native:assuredworkloads/v1beta1:Workload
properties:
billingAccount: string
cjisSettings:
kmsSettings:
nextRotationTime: string
rotationPeriod: string
complianceRegime: COMPLIANCE_REGIME_UNSPECIFIED
displayName: string
enableSovereignControls: false
etag: string
externalId: string
fedrampHighSettings:
kmsSettings:
nextRotationTime: string
rotationPeriod: string
fedrampModerateSettings:
kmsSettings:
nextRotationTime: string
rotationPeriod: string
il4Settings:
kmsSettings:
nextRotationTime: string
rotationPeriod: string
labels:
string: string
location: string
name: string
organizationId: string
partner: PARTNER_UNSPECIFIED
partnerPermissions:
assuredWorkloadsMonitoring: false
dataLogsViewer: false
serviceAccessApprover: false
provisionedResourcesParent: string
resourceSettings:
- displayName: string
resourceId: string
resourceType: RESOURCE_TYPE_UNSPECIFIED
violationNotificationsEnabled: false
Workload Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The Workload resource accepts the following input properties:
- Compliance
Regime Pulumi.Google Native. Assured Workloads. V1Beta1. Workload Compliance Regime - Immutable. Compliance Regime associated with this workload.
- Display
Name string - The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
- Organization
Id string - Billing
Account string - Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form
billingAccounts/{billing_account_id}
. For example,billingAccounts/012345-567890-ABCDEF
. - Cjis
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload CJISSettings - Input only. Immutable. Settings specific to resources needed for CJIS.
- Enable
Sovereign boolControls - Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
- Etag string
- Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
- External
Id string - Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.
- Fedramp
High Pulumi.Settings Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload Fedramp High Settings - Input only. Immutable. Settings specific to resources needed for FedRAMP High.
- Fedramp
Moderate Pulumi.Settings Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload Fedramp Moderate Settings - Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
- Il4Settings
Pulumi.
Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload IL4Settings - Input only. Immutable. Settings specific to resources needed for IL4.
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
- Labels Dictionary<string, string>
- Optional. Labels applied to the workload.
- Location string
- Name string
- Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
- Partner
Pulumi.
Google Native. Assured Workloads. V1Beta1. Workload Partner - Optional. Partner regime associated with this workload.
- Partner
Permissions Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload Partner Permissions - Optional. Permissions granted to the AW Partner SA account for the customer workload
- Provisioned
Resources stringParent - Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
- Resource
Settings List<Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload Resource Settings> - Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
- Violation
Notifications boolEnabled - Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
- Compliance
Regime WorkloadCompliance Regime - Immutable. Compliance Regime associated with this workload.
- Display
Name string - The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
- Organization
Id string - Billing
Account string - Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form
billingAccounts/{billing_account_id}
. For example,billingAccounts/012345-567890-ABCDEF
. - Cjis
Settings GoogleCloud Assuredworkloads V1beta1Workload CJISSettings Args - Input only. Immutable. Settings specific to resources needed for CJIS.
- Enable
Sovereign boolControls - Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
- Etag string
- Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
- External
Id string - Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.
- Fedramp
High GoogleSettings Cloud Assuredworkloads V1beta1Workload Fedramp High Settings Args - Input only. Immutable. Settings specific to resources needed for FedRAMP High.
- Fedramp
Moderate GoogleSettings Cloud Assuredworkloads V1beta1Workload Fedramp Moderate Settings Args - Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
- Il4Settings
Google
Cloud Assuredworkloads V1beta1Workload IL4Settings Args - Input only. Immutable. Settings specific to resources needed for IL4.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Args - Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
- Labels map[string]string
- Optional. Labels applied to the workload.
- Location string
- Name string
- Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
- Partner
Workload
Partner - Optional. Partner regime associated with this workload.
- Partner
Permissions GoogleCloud Assuredworkloads V1beta1Workload Partner Permissions Args - Optional. Permissions granted to the AW Partner SA account for the customer workload
- Provisioned
Resources stringParent - Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
- Resource
Settings []GoogleCloud Assuredworkloads V1beta1Workload Resource Settings Args - Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
- Violation
Notifications boolEnabled - Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
- compliance
Regime WorkloadCompliance Regime - Immutable. Compliance Regime associated with this workload.
- display
Name String - The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
- organization
Id String - billing
Account String - Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form
billingAccounts/{billing_account_id}
. For example,billingAccounts/012345-567890-ABCDEF
. - cjis
Settings GoogleCloud Assuredworkloads V1beta1Workload CJISSettings - Input only. Immutable. Settings specific to resources needed for CJIS.
- enable
Sovereign BooleanControls - Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
- etag String
- Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
- external
Id String - Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.
- fedramp
High GoogleSettings Cloud Assuredworkloads V1beta1Workload Fedramp High Settings - Input only. Immutable. Settings specific to resources needed for FedRAMP High.
- fedramp
Moderate GoogleSettings Cloud Assuredworkloads V1beta1Workload Fedramp Moderate Settings - Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
- il4Settings
Google
Cloud Assuredworkloads V1beta1Workload IL4Settings - Input only. Immutable. Settings specific to resources needed for IL4.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
- labels Map<String,String>
- Optional. Labels applied to the workload.
- location String
- name String
- Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
- partner
Workload
Partner - Optional. Partner regime associated with this workload.
- partner
Permissions GoogleCloud Assuredworkloads V1beta1Workload Partner Permissions - Optional. Permissions granted to the AW Partner SA account for the customer workload
- provisioned
Resources StringParent - Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
- resource
Settings List<GoogleCloud Assuredworkloads V1beta1Workload Resource Settings> - Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
- violation
Notifications BooleanEnabled - Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
- compliance
Regime WorkloadCompliance Regime - Immutable. Compliance Regime associated with this workload.
- display
Name string - The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
- organization
Id string - billing
Account string - Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form
billingAccounts/{billing_account_id}
. For example,billingAccounts/012345-567890-ABCDEF
. - cjis
Settings GoogleCloud Assuredworkloads V1beta1Workload CJISSettings - Input only. Immutable. Settings specific to resources needed for CJIS.
- enable
Sovereign booleanControls - Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
- etag string
- Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
- external
Id string - Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.
- fedramp
High GoogleSettings Cloud Assuredworkloads V1beta1Workload Fedramp High Settings - Input only. Immutable. Settings specific to resources needed for FedRAMP High.
- fedramp
Moderate GoogleSettings Cloud Assuredworkloads V1beta1Workload Fedramp Moderate Settings - Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
- il4Settings
Google
Cloud Assuredworkloads V1beta1Workload IL4Settings - Input only. Immutable. Settings specific to resources needed for IL4.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
- labels {[key: string]: string}
- Optional. Labels applied to the workload.
- location string
- name string
- Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
- partner
Workload
Partner - Optional. Partner regime associated with this workload.
- partner
Permissions GoogleCloud Assuredworkloads V1beta1Workload Partner Permissions - Optional. Permissions granted to the AW Partner SA account for the customer workload
- provisioned
Resources stringParent - Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
- resource
Settings GoogleCloud Assuredworkloads V1beta1Workload Resource Settings[] - Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
- violation
Notifications booleanEnabled - Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
- compliance_
regime WorkloadCompliance Regime - Immutable. Compliance Regime associated with this workload.
- display_
name str - The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
- organization_
id str - billing_
account str - Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form
billingAccounts/{billing_account_id}
. For example,billingAccounts/012345-567890-ABCDEF
. - cjis_
settings GoogleCloud Assuredworkloads V1beta1Workload CJISSettings Args - Input only. Immutable. Settings specific to resources needed for CJIS.
- enable_
sovereign_ boolcontrols - Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
- etag str
- Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
- external_
id str - Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.
- fedramp_
high_ Googlesettings Cloud Assuredworkloads V1beta1Workload Fedramp High Settings Args - Input only. Immutable. Settings specific to resources needed for FedRAMP High.
- fedramp_
moderate_ Googlesettings Cloud Assuredworkloads V1beta1Workload Fedramp Moderate Settings Args - Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
- il4_
settings GoogleCloud Assuredworkloads V1beta1Workload IL4Settings Args - Input only. Immutable. Settings specific to resources needed for IL4.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Args - Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
- labels Mapping[str, str]
- Optional. Labels applied to the workload.
- location str
- name str
- Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
- partner
Workload
Partner - Optional. Partner regime associated with this workload.
- partner_
permissions GoogleCloud Assuredworkloads V1beta1Workload Partner Permissions Args - Optional. Permissions granted to the AW Partner SA account for the customer workload
- provisioned_
resources_ strparent - Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
- resource_
settings Sequence[GoogleCloud Assuredworkloads V1beta1Workload Resource Settings Args] - Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
- violation_
notifications_ boolenabled - Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
- compliance
Regime "COMPLIANCE_REGIME_UNSPECIFIED" | "IL4" | "CJIS" | "FEDRAMP_HIGH" | "FEDRAMP_MODERATE" | "US_REGIONAL_ACCESS" | "HIPAA" | "HITRUST" | "EU_REGIONS_AND_SUPPORT" | "CA_REGIONS_AND_SUPPORT" | "ITAR" | "AU_REGIONS_AND_US_SUPPORT" | "ASSURED_WORKLOADS_FOR_PARTNERS" | "ISR_REGIONS" | "ISR_REGIONS_AND_SUPPORT" | "CA_PROTECTED_B" | "IL5" | "IL2" | "JP_REGIONS_AND_SUPPORT" - Immutable. Compliance Regime associated with this workload.
- display
Name String - The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
- organization
Id String - billing
Account String - Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form
billingAccounts/{billing_account_id}
. For example,billingAccounts/012345-567890-ABCDEF
. - cjis
Settings Property Map - Input only. Immutable. Settings specific to resources needed for CJIS.
- enable
Sovereign BooleanControls - Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
- etag String
- Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
- external
Id String - Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.
- fedramp
High Property MapSettings - Input only. Immutable. Settings specific to resources needed for FedRAMP High.
- fedramp
Moderate Property MapSettings - Input only. Immutable. Settings specific to resources needed for FedRAMP Moderate.
- il4Settings Property Map
- Input only. Immutable. Settings specific to resources needed for IL4.
- kms
Settings Property Map - Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.
- labels Map<String>
- Optional. Labels applied to the workload.
- location String
- name String
- Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
- partner "PARTNER_UNSPECIFIED" | "LOCAL_CONTROLS_BY_S3NS" | "SOVEREIGN_CONTROLS_BY_T_SYSTEMS" | "SOVEREIGN_CONTROLS_BY_SIA_MINSAIT" | "SOVEREIGN_CONTROLS_BY_PSN"
- Optional. Partner regime associated with this workload.
- partner
Permissions Property Map - Optional. Permissions granted to the AW Partner SA account for the customer workload
- provisioned
Resources StringParent - Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
- resource
Settings List<Property Map> - Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
- violation
Notifications BooleanEnabled - Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
Outputs
All input properties are implicitly available as output properties. Additionally, the Workload resource produces the following output properties:
- Compliance
Status Pulumi.Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload Compliance Status Response - Count of active Violations in the Workload.
- Compliant
But List<string>Disallowed Services - Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
- Create
Time string - Immutable. The Workload creation timestamp.
- Ekm
Provisioning Pulumi.Response Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload Ekm Provisioning Response Response - Represents the Ekm Provisioning State of the given workload.
- Id string
- The provider-assigned unique ID for this managed resource.
- Kaj
Enrollment stringState - Represents the KAJ enrollment state of the given workload.
- Resource
Monitoring boolEnabled - Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
- Resources
List<Pulumi.
Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload Resource Info Response> - The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
- Saa
Enrollment Pulumi.Response Google Native. Assured Workloads. V1Beta1. Outputs. Google Cloud Assuredworkloads V1beta1Workload Saa Enrollment Response Response - Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
- Compliance
Status GoogleCloud Assuredworkloads V1beta1Workload Compliance Status Response - Count of active Violations in the Workload.
- Compliant
But []stringDisallowed Services - Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
- Create
Time string - Immutable. The Workload creation timestamp.
- Ekm
Provisioning GoogleResponse Cloud Assuredworkloads V1beta1Workload Ekm Provisioning Response Response - Represents the Ekm Provisioning State of the given workload.
- Id string
- The provider-assigned unique ID for this managed resource.
- Kaj
Enrollment stringState - Represents the KAJ enrollment state of the given workload.
- Resource
Monitoring boolEnabled - Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
- Resources
[]Google
Cloud Assuredworkloads V1beta1Workload Resource Info Response - The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
- Saa
Enrollment GoogleResponse Cloud Assuredworkloads V1beta1Workload Saa Enrollment Response Response - Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
- compliance
Status GoogleCloud Assuredworkloads V1beta1Workload Compliance Status Response - Count of active Violations in the Workload.
- compliant
But List<String>Disallowed Services - Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
- create
Time String - Immutable. The Workload creation timestamp.
- ekm
Provisioning GoogleResponse Cloud Assuredworkloads V1beta1Workload Ekm Provisioning Response Response - Represents the Ekm Provisioning State of the given workload.
- id String
- The provider-assigned unique ID for this managed resource.
- kaj
Enrollment StringState - Represents the KAJ enrollment state of the given workload.
- resource
Monitoring BooleanEnabled - Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
- resources
List<Google
Cloud Assuredworkloads V1beta1Workload Resource Info Response> - The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
- saa
Enrollment GoogleResponse Cloud Assuredworkloads V1beta1Workload Saa Enrollment Response Response - Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
- compliance
Status GoogleCloud Assuredworkloads V1beta1Workload Compliance Status Response - Count of active Violations in the Workload.
- compliant
But string[]Disallowed Services - Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
- create
Time string - Immutable. The Workload creation timestamp.
- ekm
Provisioning GoogleResponse Cloud Assuredworkloads V1beta1Workload Ekm Provisioning Response Response - Represents the Ekm Provisioning State of the given workload.
- id string
- The provider-assigned unique ID for this managed resource.
- kaj
Enrollment stringState - Represents the KAJ enrollment state of the given workload.
- resource
Monitoring booleanEnabled - Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
- resources
Google
Cloud Assuredworkloads V1beta1Workload Resource Info Response[] - The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
- saa
Enrollment GoogleResponse Cloud Assuredworkloads V1beta1Workload Saa Enrollment Response Response - Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
- compliance_
status GoogleCloud Assuredworkloads V1beta1Workload Compliance Status Response - Count of active Violations in the Workload.
- compliant_
but_ Sequence[str]disallowed_ services - Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
- create_
time str - Immutable. The Workload creation timestamp.
- ekm_
provisioning_ Googleresponse Cloud Assuredworkloads V1beta1Workload Ekm Provisioning Response Response - Represents the Ekm Provisioning State of the given workload.
- id str
- The provider-assigned unique ID for this managed resource.
- kaj_
enrollment_ strstate - Represents the KAJ enrollment state of the given workload.
- resource_
monitoring_ boolenabled - Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
- resources
Sequence[Google
Cloud Assuredworkloads V1beta1Workload Resource Info Response] - The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
- saa_
enrollment_ Googleresponse Cloud Assuredworkloads V1beta1Workload Saa Enrollment Response Response - Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
- compliance
Status Property Map - Count of active Violations in the Workload.
- compliant
But List<String>Disallowed Services - Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
- create
Time String - Immutable. The Workload creation timestamp.
- ekm
Provisioning Property MapResponse - Represents the Ekm Provisioning State of the given workload.
- id String
- The provider-assigned unique ID for this managed resource.
- kaj
Enrollment StringState - Represents the KAJ enrollment state of the given workload.
- resource
Monitoring BooleanEnabled - Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
- resources List<Property Map>
- The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
- saa
Enrollment Property MapResponse - Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
Supporting Types
GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettings, GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsArgs
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings Property Map - Input only. Immutable. Settings used to create a CMEK crypto key.
GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadCJISSettingsResponseArgs
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings Property Map - Input only. Immutable. Settings used to create a CMEK crypto key.
GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadComplianceStatusResponseArgs
- Acknowledged
Resource intViolation Count - Number of current resource violations which are not acknowledged.
- Acknowledged
Violation intCount - Number of current orgPolicy violations which are acknowledged.
- Active
Resource intViolation Count - Number of current resource violations which are acknowledged.
- Active
Violation intCount - Number of current orgPolicy violations which are not acknowledged.
- Acknowledged
Resource intViolation Count - Number of current resource violations which are not acknowledged.
- Acknowledged
Violation intCount - Number of current orgPolicy violations which are acknowledged.
- Active
Resource intViolation Count - Number of current resource violations which are acknowledged.
- Active
Violation intCount - Number of current orgPolicy violations which are not acknowledged.
- acknowledged
Resource IntegerViolation Count - Number of current resource violations which are not acknowledged.
- acknowledged
Violation IntegerCount - Number of current orgPolicy violations which are acknowledged.
- active
Resource IntegerViolation Count - Number of current resource violations which are acknowledged.
- active
Violation IntegerCount - Number of current orgPolicy violations which are not acknowledged.
- acknowledged
Resource numberViolation Count - Number of current resource violations which are not acknowledged.
- acknowledged
Violation numberCount - Number of current orgPolicy violations which are acknowledged.
- active
Resource numberViolation Count - Number of current resource violations which are acknowledged.
- active
Violation numberCount - Number of current orgPolicy violations which are not acknowledged.
- acknowledged_
resource_ intviolation_ count - Number of current resource violations which are not acknowledged.
- acknowledged_
violation_ intcount - Number of current orgPolicy violations which are acknowledged.
- active_
resource_ intviolation_ count - Number of current resource violations which are acknowledged.
- active_
violation_ intcount - Number of current orgPolicy violations which are not acknowledged.
- acknowledged
Resource NumberViolation Count - Number of current resource violations which are not acknowledged.
- acknowledged
Violation NumberCount - Number of current orgPolicy violations which are acknowledged.
- active
Resource NumberViolation Count - Number of current resource violations which are acknowledged.
- active
Violation NumberCount - Number of current orgPolicy violations which are not acknowledged.
GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadEkmProvisioningResponseResponseArgs
- Ekm
Provisioning stringError Domain - Indicates Ekm provisioning error if any.
- Ekm
Provisioning stringError Mapping - Detailed error message if Ekm provisioning fails
- Ekm
Provisioning stringState - Indicates Ekm enrollment Provisioning of a given workload.
- Ekm
Provisioning stringError Domain - Indicates Ekm provisioning error if any.
- Ekm
Provisioning stringError Mapping - Detailed error message if Ekm provisioning fails
- Ekm
Provisioning stringState - Indicates Ekm enrollment Provisioning of a given workload.
- ekm
Provisioning StringError Domain - Indicates Ekm provisioning error if any.
- ekm
Provisioning StringError Mapping - Detailed error message if Ekm provisioning fails
- ekm
Provisioning StringState - Indicates Ekm enrollment Provisioning of a given workload.
- ekm
Provisioning stringError Domain - Indicates Ekm provisioning error if any.
- ekm
Provisioning stringError Mapping - Detailed error message if Ekm provisioning fails
- ekm
Provisioning stringState - Indicates Ekm enrollment Provisioning of a given workload.
- ekm_
provisioning_ strerror_ domain - Indicates Ekm provisioning error if any.
- ekm_
provisioning_ strerror_ mapping - Detailed error message if Ekm provisioning fails
- ekm_
provisioning_ strstate - Indicates Ekm enrollment Provisioning of a given workload.
- ekm
Provisioning StringError Domain - Indicates Ekm provisioning error if any.
- ekm
Provisioning StringError Mapping - Detailed error message if Ekm provisioning fails
- ekm
Provisioning StringState - Indicates Ekm enrollment Provisioning of a given workload.
GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettings, GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsArgs
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings Property Map - Input only. Immutable. Settings used to create a CMEK crypto key.
GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampHighSettingsResponseArgs
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings Property Map - Input only. Immutable. Settings used to create a CMEK crypto key.
GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettings, GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsArgs
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings Property Map - Input only. Immutable. Settings used to create a CMEK crypto key.
GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadFedrampModerateSettingsResponseArgs
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings Property Map - Input only. Immutable. Settings used to create a CMEK crypto key.
GoogleCloudAssuredworkloadsV1beta1WorkloadIL4Settings, GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsArgs
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings Property Map - Input only. Immutable. Settings used to create a CMEK crypto key.
GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadIL4SettingsResponseArgs
- Kms
Settings Pulumi.Google Native. Assured Workloads. V1Beta1. Inputs. Google Cloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- Kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms_
settings GoogleCloud Assuredworkloads V1beta1Workload KMSSettings Response - Input only. Immutable. Settings used to create a CMEK crypto key.
- kms
Settings Property Map - Input only. Immutable. Settings used to create a CMEK crypto key.
GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettings, GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsArgs
- Next
Rotation stringTime - Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- Rotation
Period string - Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- Next
Rotation stringTime - Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- Rotation
Period string - Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- next
Rotation StringTime - Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- rotation
Period String - Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- next
Rotation stringTime - Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- rotation
Period string - Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- next_
rotation_ strtime - Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- rotation_
period str - Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- next
Rotation StringTime - Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- rotation
Period String - Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadKMSSettingsResponseArgs
- Next
Rotation stringTime - Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- Rotation
Period string - Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- Next
Rotation stringTime - Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- Rotation
Period string - Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- next
Rotation StringTime - Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- rotation
Period String - Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- next
Rotation stringTime - Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- rotation
Period string - Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- next_
rotation_ strtime - Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- rotation_
period str - Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
- next
Rotation StringTime - Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
- rotation
Period String - Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissions, GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsArgs
- Assured
Workloads boolMonitoring - Optional. Allow partner to view violation alerts.
- Data
Logs boolViewer - Allow the partner to view inspectability logs and monitoring violations.
- Service
Access boolApprover - Optional. Allow partner to view access approval logs.
- Assured
Workloads boolMonitoring - Optional. Allow partner to view violation alerts.
- Data
Logs boolViewer - Allow the partner to view inspectability logs and monitoring violations.
- Service
Access boolApprover - Optional. Allow partner to view access approval logs.
- assured
Workloads BooleanMonitoring - Optional. Allow partner to view violation alerts.
- data
Logs BooleanViewer - Allow the partner to view inspectability logs and monitoring violations.
- service
Access BooleanApprover - Optional. Allow partner to view access approval logs.
- assured
Workloads booleanMonitoring - Optional. Allow partner to view violation alerts.
- data
Logs booleanViewer - Allow the partner to view inspectability logs and monitoring violations.
- service
Access booleanApprover - Optional. Allow partner to view access approval logs.
- assured_
workloads_ boolmonitoring - Optional. Allow partner to view violation alerts.
- data_
logs_ boolviewer - Allow the partner to view inspectability logs and monitoring violations.
- service_
access_ boolapprover - Optional. Allow partner to view access approval logs.
- assured
Workloads BooleanMonitoring - Optional. Allow partner to view violation alerts.
- data
Logs BooleanViewer - Allow the partner to view inspectability logs and monitoring violations.
- service
Access BooleanApprover - Optional. Allow partner to view access approval logs.
GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadPartnerPermissionsResponseArgs
- Assured
Workloads boolMonitoring - Optional. Allow partner to view violation alerts.
- Data
Logs boolViewer - Allow the partner to view inspectability logs and monitoring violations.
- Service
Access boolApprover - Optional. Allow partner to view access approval logs.
- Assured
Workloads boolMonitoring - Optional. Allow partner to view violation alerts.
- Data
Logs boolViewer - Allow the partner to view inspectability logs and monitoring violations.
- Service
Access boolApprover - Optional. Allow partner to view access approval logs.
- assured
Workloads BooleanMonitoring - Optional. Allow partner to view violation alerts.
- data
Logs BooleanViewer - Allow the partner to view inspectability logs and monitoring violations.
- service
Access BooleanApprover - Optional. Allow partner to view access approval logs.
- assured
Workloads booleanMonitoring - Optional. Allow partner to view violation alerts.
- data
Logs booleanViewer - Allow the partner to view inspectability logs and monitoring violations.
- service
Access booleanApprover - Optional. Allow partner to view access approval logs.
- assured_
workloads_ boolmonitoring - Optional. Allow partner to view violation alerts.
- data_
logs_ boolviewer - Allow the partner to view inspectability logs and monitoring violations.
- service_
access_ boolapprover - Optional. Allow partner to view access approval logs.
- assured
Workloads BooleanMonitoring - Optional. Allow partner to view violation alerts.
- data
Logs BooleanViewer - Allow the partner to view inspectability logs and monitoring violations.
- service
Access BooleanApprover - Optional. Allow partner to view access approval logs.
GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadResourceInfoResponseArgs
- Resource
Id string - Resource identifier. For a project this represents project_number.
- Resource
Type string - Indicates the type of resource.
- Resource
Id string - Resource identifier. For a project this represents project_number.
- Resource
Type string - Indicates the type of resource.
- resource
Id String - Resource identifier. For a project this represents project_number.
- resource
Type String - Indicates the type of resource.
- resource
Id string - Resource identifier. For a project this represents project_number.
- resource
Type string - Indicates the type of resource.
- resource_
id str - Resource identifier. For a project this represents project_number.
- resource_
type str - Indicates the type of resource.
- resource
Id String - Resource identifier. For a project this represents project_number.
- resource
Type String - Indicates the type of resource.
GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettings, GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsArgs
- Display
Name string - User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- Resource
Id string - Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- Resource
Type Pulumi.Google Native. Assured Workloads. V1Beta1. Google Cloud Assuredworkloads V1beta1Workload Resource Settings Resource Type - Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- Display
Name string - User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- Resource
Id string - Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- Resource
Type GoogleCloud Assuredworkloads V1beta1Workload Resource Settings Resource Type - Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- display
Name String - User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- resource
Id String - Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- resource
Type GoogleCloud Assuredworkloads V1beta1Workload Resource Settings Resource Type - Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- display
Name string - User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- resource
Id string - Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- resource
Type GoogleCloud Assuredworkloads V1beta1Workload Resource Settings Resource Type - Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- display_
name str - User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- resource_
id str - Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- resource_
type GoogleCloud Assuredworkloads V1beta1Workload Resource Settings Resource Type - Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- display
Name String - User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- resource
Id String - Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- resource
Type "RESOURCE_TYPE_UNSPECIFIED" | "CONSUMER_PROJECT" | "CONSUMER_FOLDER" | "ENCRYPTION_KEYS_PROJECT" | "KEYRING" - Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceType, GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResourceTypeArgs
- Resource
Type Unspecified - RESOURCE_TYPE_UNSPECIFIEDUnknown resource type.
- Consumer
Project - CONSUMER_PROJECTDeprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.
- Consumer
Folder - CONSUMER_FOLDERConsumer Folder.
- Encryption
Keys Project - ENCRYPTION_KEYS_PROJECTConsumer project containing encryption keys.
- Keyring
- KEYRINGKeyring resource that hosts encryption keys.
- Google
Cloud Assuredworkloads V1beta1Workload Resource Settings Resource Type Resource Type Unspecified - RESOURCE_TYPE_UNSPECIFIEDUnknown resource type.
- Google
Cloud Assuredworkloads V1beta1Workload Resource Settings Resource Type Consumer Project - CONSUMER_PROJECTDeprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.
- Google
Cloud Assuredworkloads V1beta1Workload Resource Settings Resource Type Consumer Folder - CONSUMER_FOLDERConsumer Folder.
- Google
Cloud Assuredworkloads V1beta1Workload Resource Settings Resource Type Encryption Keys Project - ENCRYPTION_KEYS_PROJECTConsumer project containing encryption keys.
- Google
Cloud Assuredworkloads V1beta1Workload Resource Settings Resource Type Keyring - KEYRINGKeyring resource that hosts encryption keys.
- Resource
Type Unspecified - RESOURCE_TYPE_UNSPECIFIEDUnknown resource type.
- Consumer
Project - CONSUMER_PROJECTDeprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.
- Consumer
Folder - CONSUMER_FOLDERConsumer Folder.
- Encryption
Keys Project - ENCRYPTION_KEYS_PROJECTConsumer project containing encryption keys.
- Keyring
- KEYRINGKeyring resource that hosts encryption keys.
- Resource
Type Unspecified - RESOURCE_TYPE_UNSPECIFIEDUnknown resource type.
- Consumer
Project - CONSUMER_PROJECTDeprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.
- Consumer
Folder - CONSUMER_FOLDERConsumer Folder.
- Encryption
Keys Project - ENCRYPTION_KEYS_PROJECTConsumer project containing encryption keys.
- Keyring
- KEYRINGKeyring resource that hosts encryption keys.
- RESOURCE_TYPE_UNSPECIFIED
- RESOURCE_TYPE_UNSPECIFIEDUnknown resource type.
- CONSUMER_PROJECT
- CONSUMER_PROJECTDeprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.
- CONSUMER_FOLDER
- CONSUMER_FOLDERConsumer Folder.
- ENCRYPTION_KEYS_PROJECT
- ENCRYPTION_KEYS_PROJECTConsumer project containing encryption keys.
- KEYRING
- KEYRINGKeyring resource that hosts encryption keys.
- "RESOURCE_TYPE_UNSPECIFIED"
- RESOURCE_TYPE_UNSPECIFIEDUnknown resource type.
- "CONSUMER_PROJECT"
- CONSUMER_PROJECTDeprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.
- "CONSUMER_FOLDER"
- CONSUMER_FOLDERConsumer Folder.
- "ENCRYPTION_KEYS_PROJECT"
- ENCRYPTION_KEYS_PROJECTConsumer project containing encryption keys.
- "KEYRING"
- KEYRINGKeyring resource that hosts encryption keys.
GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadResourceSettingsResponseArgs
- Display
Name string - User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- Resource
Id string - Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- Resource
Type string - Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- Display
Name string - User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- Resource
Id string - Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- Resource
Type string - Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- display
Name String - User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- resource
Id String - Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- resource
Type String - Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- display
Name string - User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- resource
Id string - Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- resource
Type string - Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- display_
name str - User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- resource_
id str - Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- resource_
type str - Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
- display
Name String - User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
- resource
Id String - Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
- resource
Type String - Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponse, GoogleCloudAssuredworkloadsV1beta1WorkloadSaaEnrollmentResponseResponseArgs
- Setup
Errors List<string> - Indicates SAA enrollment setup error if any.
- Setup
Status string - Indicates SAA enrollment status of a given workload.
- Setup
Errors []string - Indicates SAA enrollment setup error if any.
- Setup
Status string - Indicates SAA enrollment status of a given workload.
- setup
Errors List<String> - Indicates SAA enrollment setup error if any.
- setup
Status String - Indicates SAA enrollment status of a given workload.
- setup
Errors string[] - Indicates SAA enrollment setup error if any.
- setup
Status string - Indicates SAA enrollment status of a given workload.
- setup_
errors Sequence[str] - Indicates SAA enrollment setup error if any.
- setup_
status str - Indicates SAA enrollment status of a given workload.
- setup
Errors List<String> - Indicates SAA enrollment setup error if any.
- setup
Status String - Indicates SAA enrollment status of a given workload.
WorkloadComplianceRegime, WorkloadComplianceRegimeArgs
- Compliance
Regime Unspecified - COMPLIANCE_REGIME_UNSPECIFIEDUnknown compliance regime.
- Il4
- IL4Information protection as per DoD IL4 requirements.
- Cjis
- CJISCriminal Justice Information Services (CJIS) Security policies.
- Fedramp
High - FEDRAMP_HIGHFedRAMP High data protection controls
- Fedramp
Moderate - FEDRAMP_MODERATEFedRAMP Moderate data protection controls
- Us
Regional Access - US_REGIONAL_ACCESSAssured Workloads For US Regions data protection controls
- Hipaa
- HIPAAHealth Insurance Portability and Accountability Act controls
- Hitrust
- HITRUSTHealth Information Trust Alliance controls
- Eu
Regions And Support - EU_REGIONS_AND_SUPPORTAssured Workloads For EU Regions and Support controls
- Ca
Regions And Support - CA_REGIONS_AND_SUPPORTAssured Workloads For Canada Regions and Support controls
- Itar
- ITARInternational Traffic in Arms Regulations
- Au
Regions And Us Support - AU_REGIONS_AND_US_SUPPORTAssured Workloads for Australia Regions and Support controls
- Assured
Workloads For Partners - ASSURED_WORKLOADS_FOR_PARTNERSAssured Workloads for Partners;
- Isr
Regions - ISR_REGIONSAssured Workloads for Israel
- Isr
Regions And Support - ISR_REGIONS_AND_SUPPORTAssured Workloads for Israel Regions
- Ca
Protected B - CA_PROTECTED_BAssured Workloads for Canada Protected B regime
- Il5
- IL5Information protection as per DoD IL5 requirements.
- Il2
- IL2Information protection as per DoD IL2 requirements.
- Jp
Regions And Support - JP_REGIONS_AND_SUPPORTAssured Workloads for Japan Regions
- Workload
Compliance Regime Compliance Regime Unspecified - COMPLIANCE_REGIME_UNSPECIFIEDUnknown compliance regime.
- Workload
Compliance Regime Il4 - IL4Information protection as per DoD IL4 requirements.
- Workload
Compliance Regime Cjis - CJISCriminal Justice Information Services (CJIS) Security policies.
- Workload
Compliance Regime Fedramp High - FEDRAMP_HIGHFedRAMP High data protection controls
- Workload
Compliance Regime Fedramp Moderate - FEDRAMP_MODERATEFedRAMP Moderate data protection controls
- Workload
Compliance Regime Us Regional Access - US_REGIONAL_ACCESSAssured Workloads For US Regions data protection controls
- Workload
Compliance Regime Hipaa - HIPAAHealth Insurance Portability and Accountability Act controls
- Workload
Compliance Regime Hitrust - HITRUSTHealth Information Trust Alliance controls
- Workload
Compliance Regime Eu Regions And Support - EU_REGIONS_AND_SUPPORTAssured Workloads For EU Regions and Support controls
- Workload
Compliance Regime Ca Regions And Support - CA_REGIONS_AND_SUPPORTAssured Workloads For Canada Regions and Support controls
- Workload
Compliance Regime Itar - ITARInternational Traffic in Arms Regulations
- Workload
Compliance Regime Au Regions And Us Support - AU_REGIONS_AND_US_SUPPORTAssured Workloads for Australia Regions and Support controls
- Workload
Compliance Regime Assured Workloads For Partners - ASSURED_WORKLOADS_FOR_PARTNERSAssured Workloads for Partners;
- Workload
Compliance Regime Isr Regions - ISR_REGIONSAssured Workloads for Israel
- Workload
Compliance Regime Isr Regions And Support - ISR_REGIONS_AND_SUPPORTAssured Workloads for Israel Regions
- Workload
Compliance Regime Ca Protected B - CA_PROTECTED_BAssured Workloads for Canada Protected B regime
- Workload
Compliance Regime Il5 - IL5Information protection as per DoD IL5 requirements.
- Workload
Compliance Regime Il2 - IL2Information protection as per DoD IL2 requirements.
- Workload
Compliance Regime Jp Regions And Support - JP_REGIONS_AND_SUPPORTAssured Workloads for Japan Regions
- Compliance
Regime Unspecified - COMPLIANCE_REGIME_UNSPECIFIEDUnknown compliance regime.
- Il4
- IL4Information protection as per DoD IL4 requirements.
- Cjis
- CJISCriminal Justice Information Services (CJIS) Security policies.
- Fedramp
High - FEDRAMP_HIGHFedRAMP High data protection controls
- Fedramp
Moderate - FEDRAMP_MODERATEFedRAMP Moderate data protection controls
- Us
Regional Access - US_REGIONAL_ACCESSAssured Workloads For US Regions data protection controls
- Hipaa
- HIPAAHealth Insurance Portability and Accountability Act controls
- Hitrust
- HITRUSTHealth Information Trust Alliance controls
- Eu
Regions And Support - EU_REGIONS_AND_SUPPORTAssured Workloads For EU Regions and Support controls
- Ca
Regions And Support - CA_REGIONS_AND_SUPPORTAssured Workloads For Canada Regions and Support controls
- Itar
- ITARInternational Traffic in Arms Regulations
- Au
Regions And Us Support - AU_REGIONS_AND_US_SUPPORTAssured Workloads for Australia Regions and Support controls
- Assured
Workloads For Partners - ASSURED_WORKLOADS_FOR_PARTNERSAssured Workloads for Partners;
- Isr
Regions - ISR_REGIONSAssured Workloads for Israel
- Isr
Regions And Support - ISR_REGIONS_AND_SUPPORTAssured Workloads for Israel Regions
- Ca
Protected B - CA_PROTECTED_BAssured Workloads for Canada Protected B regime
- Il5
- IL5Information protection as per DoD IL5 requirements.
- Il2
- IL2Information protection as per DoD IL2 requirements.
- Jp
Regions And Support - JP_REGIONS_AND_SUPPORTAssured Workloads for Japan Regions
- Compliance
Regime Unspecified - COMPLIANCE_REGIME_UNSPECIFIEDUnknown compliance regime.
- Il4
- IL4Information protection as per DoD IL4 requirements.
- Cjis
- CJISCriminal Justice Information Services (CJIS) Security policies.
- Fedramp
High - FEDRAMP_HIGHFedRAMP High data protection controls
- Fedramp
Moderate - FEDRAMP_MODERATEFedRAMP Moderate data protection controls
- Us
Regional Access - US_REGIONAL_ACCESSAssured Workloads For US Regions data protection controls
- Hipaa
- HIPAAHealth Insurance Portability and Accountability Act controls
- Hitrust
- HITRUSTHealth Information Trust Alliance controls
- Eu
Regions And Support - EU_REGIONS_AND_SUPPORTAssured Workloads For EU Regions and Support controls
- Ca
Regions And Support - CA_REGIONS_AND_SUPPORTAssured Workloads For Canada Regions and Support controls
- Itar
- ITARInternational Traffic in Arms Regulations
- Au
Regions And Us Support - AU_REGIONS_AND_US_SUPPORTAssured Workloads for Australia Regions and Support controls
- Assured
Workloads For Partners - ASSURED_WORKLOADS_FOR_PARTNERSAssured Workloads for Partners;
- Isr
Regions - ISR_REGIONSAssured Workloads for Israel
- Isr
Regions And Support - ISR_REGIONS_AND_SUPPORTAssured Workloads for Israel Regions
- Ca
Protected B - CA_PROTECTED_BAssured Workloads for Canada Protected B regime
- Il5
- IL5Information protection as per DoD IL5 requirements.
- Il2
- IL2Information protection as per DoD IL2 requirements.
- Jp
Regions And Support - JP_REGIONS_AND_SUPPORTAssured Workloads for Japan Regions
- COMPLIANCE_REGIME_UNSPECIFIED
- COMPLIANCE_REGIME_UNSPECIFIEDUnknown compliance regime.
- IL4
- IL4Information protection as per DoD IL4 requirements.
- CJIS
- CJISCriminal Justice Information Services (CJIS) Security policies.
- FEDRAMP_HIGH
- FEDRAMP_HIGHFedRAMP High data protection controls
- FEDRAMP_MODERATE
- FEDRAMP_MODERATEFedRAMP Moderate data protection controls
- US_REGIONAL_ACCESS
- US_REGIONAL_ACCESSAssured Workloads For US Regions data protection controls
- HIPAA
- HIPAAHealth Insurance Portability and Accountability Act controls
- HITRUST
- HITRUSTHealth Information Trust Alliance controls
- EU_REGIONS_AND_SUPPORT
- EU_REGIONS_AND_SUPPORTAssured Workloads For EU Regions and Support controls
- CA_REGIONS_AND_SUPPORT
- CA_REGIONS_AND_SUPPORTAssured Workloads For Canada Regions and Support controls
- ITAR
- ITARInternational Traffic in Arms Regulations
- AU_REGIONS_AND_US_SUPPORT
- AU_REGIONS_AND_US_SUPPORTAssured Workloads for Australia Regions and Support controls
- ASSURED_WORKLOADS_FOR_PARTNERS
- ASSURED_WORKLOADS_FOR_PARTNERSAssured Workloads for Partners;
- ISR_REGIONS
- ISR_REGIONSAssured Workloads for Israel
- ISR_REGIONS_AND_SUPPORT
- ISR_REGIONS_AND_SUPPORTAssured Workloads for Israel Regions
- CA_PROTECTED_B
- CA_PROTECTED_BAssured Workloads for Canada Protected B regime
- IL5
- IL5Information protection as per DoD IL5 requirements.
- IL2
- IL2Information protection as per DoD IL2 requirements.
- JP_REGIONS_AND_SUPPORT
- JP_REGIONS_AND_SUPPORTAssured Workloads for Japan Regions
- "COMPLIANCE_REGIME_UNSPECIFIED"
- COMPLIANCE_REGIME_UNSPECIFIEDUnknown compliance regime.
- "IL4"
- IL4Information protection as per DoD IL4 requirements.
- "CJIS"
- CJISCriminal Justice Information Services (CJIS) Security policies.
- "FEDRAMP_HIGH"
- FEDRAMP_HIGHFedRAMP High data protection controls
- "FEDRAMP_MODERATE"
- FEDRAMP_MODERATEFedRAMP Moderate data protection controls
- "US_REGIONAL_ACCESS"
- US_REGIONAL_ACCESSAssured Workloads For US Regions data protection controls
- "HIPAA"
- HIPAAHealth Insurance Portability and Accountability Act controls
- "HITRUST"
- HITRUSTHealth Information Trust Alliance controls
- "EU_REGIONS_AND_SUPPORT"
- EU_REGIONS_AND_SUPPORTAssured Workloads For EU Regions and Support controls
- "CA_REGIONS_AND_SUPPORT"
- CA_REGIONS_AND_SUPPORTAssured Workloads For Canada Regions and Support controls
- "ITAR"
- ITARInternational Traffic in Arms Regulations
- "AU_REGIONS_AND_US_SUPPORT"
- AU_REGIONS_AND_US_SUPPORTAssured Workloads for Australia Regions and Support controls
- "ASSURED_WORKLOADS_FOR_PARTNERS"
- ASSURED_WORKLOADS_FOR_PARTNERSAssured Workloads for Partners;
- "ISR_REGIONS"
- ISR_REGIONSAssured Workloads for Israel
- "ISR_REGIONS_AND_SUPPORT"
- ISR_REGIONS_AND_SUPPORTAssured Workloads for Israel Regions
- "CA_PROTECTED_B"
- CA_PROTECTED_BAssured Workloads for Canada Protected B regime
- "IL5"
- IL5Information protection as per DoD IL5 requirements.
- "IL2"
- IL2Information protection as per DoD IL2 requirements.
- "JP_REGIONS_AND_SUPPORT"
- JP_REGIONS_AND_SUPPORTAssured Workloads for Japan Regions
WorkloadPartner, WorkloadPartnerArgs
- Partner
Unspecified - PARTNER_UNSPECIFIED
- Local
Controls By S3ns - LOCAL_CONTROLS_BY_S3NSEnum representing S3NS (Thales) partner.
- Sovereign
Controls By TSystems - SOVEREIGN_CONTROLS_BY_T_SYSTEMSEnum representing T_SYSTEM (TSI) partner.
- Sovereign
Controls By Sia Minsait - SOVEREIGN_CONTROLS_BY_SIA_MINSAITEnum representing SIA_MINSAIT (Indra) partner.
- Sovereign
Controls By Psn - SOVEREIGN_CONTROLS_BY_PSNEnum representing PSN (TIM) partner.
- Workload
Partner Partner Unspecified - PARTNER_UNSPECIFIED
- Workload
Partner Local Controls By S3ns - LOCAL_CONTROLS_BY_S3NSEnum representing S3NS (Thales) partner.
- Workload
Partner Sovereign Controls By TSystems - SOVEREIGN_CONTROLS_BY_T_SYSTEMSEnum representing T_SYSTEM (TSI) partner.
- Workload
Partner Sovereign Controls By Sia Minsait - SOVEREIGN_CONTROLS_BY_SIA_MINSAITEnum representing SIA_MINSAIT (Indra) partner.
- Workload
Partner Sovereign Controls By Psn - SOVEREIGN_CONTROLS_BY_PSNEnum representing PSN (TIM) partner.
- Partner
Unspecified - PARTNER_UNSPECIFIED
- Local
Controls By S3ns - LOCAL_CONTROLS_BY_S3NSEnum representing S3NS (Thales) partner.
- Sovereign
Controls By TSystems - SOVEREIGN_CONTROLS_BY_T_SYSTEMSEnum representing T_SYSTEM (TSI) partner.
- Sovereign
Controls By Sia Minsait - SOVEREIGN_CONTROLS_BY_SIA_MINSAITEnum representing SIA_MINSAIT (Indra) partner.
- Sovereign
Controls By Psn - SOVEREIGN_CONTROLS_BY_PSNEnum representing PSN (TIM) partner.
- Partner
Unspecified - PARTNER_UNSPECIFIED
- Local
Controls By S3ns - LOCAL_CONTROLS_BY_S3NSEnum representing S3NS (Thales) partner.
- Sovereign
Controls By TSystems - SOVEREIGN_CONTROLS_BY_T_SYSTEMSEnum representing T_SYSTEM (TSI) partner.
- Sovereign
Controls By Sia Minsait - SOVEREIGN_CONTROLS_BY_SIA_MINSAITEnum representing SIA_MINSAIT (Indra) partner.
- Sovereign
Controls By Psn - SOVEREIGN_CONTROLS_BY_PSNEnum representing PSN (TIM) partner.
- PARTNER_UNSPECIFIED
- PARTNER_UNSPECIFIED
- LOCAL_CONTROLS_BY_S3NS
- LOCAL_CONTROLS_BY_S3NSEnum representing S3NS (Thales) partner.
- SOVEREIGN_CONTROLS_BY_T_SYSTEMS
- SOVEREIGN_CONTROLS_BY_T_SYSTEMSEnum representing T_SYSTEM (TSI) partner.
- SOVEREIGN_CONTROLS_BY_SIA_MINSAIT
- SOVEREIGN_CONTROLS_BY_SIA_MINSAITEnum representing SIA_MINSAIT (Indra) partner.
- SOVEREIGN_CONTROLS_BY_PSN
- SOVEREIGN_CONTROLS_BY_PSNEnum representing PSN (TIM) partner.
- "PARTNER_UNSPECIFIED"
- PARTNER_UNSPECIFIED
- "LOCAL_CONTROLS_BY_S3NS"
- LOCAL_CONTROLS_BY_S3NSEnum representing S3NS (Thales) partner.
- "SOVEREIGN_CONTROLS_BY_T_SYSTEMS"
- SOVEREIGN_CONTROLS_BY_T_SYSTEMSEnum representing T_SYSTEM (TSI) partner.
- "SOVEREIGN_CONTROLS_BY_SIA_MINSAIT"
- SOVEREIGN_CONTROLS_BY_SIA_MINSAITEnum representing SIA_MINSAIT (Indra) partner.
- "SOVEREIGN_CONTROLS_BY_PSN"
- SOVEREIGN_CONTROLS_BY_PSNEnum representing PSN (TIM) partner.
Package Details
- Repository
- Google Cloud Native pulumi/pulumi-google-native
- License
- Apache-2.0
Google Cloud Native is in preview. Google Cloud Classic is fully supported.