chronicle

package
v8.17.0-alpha.2 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jan 29, 2025 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type DataAccessLabel added in v8.14.0 

type DataAccessLabel struct {
	pulumi.CustomResourceState

	// Output only. The user who created the data access label.
	Author pulumi.StringOutput `pulumi:"author"`
	// Output only. The time at which the data access label was created.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Required. The ID to use for the data access label, which will become the label's
	// display name and the final component of the label's resource name. The
	// maximum number of characters should be 63. Regex pattern is as per AIP:
	// https://google.aip.dev/122#resource-id-segments
	//
	// ***
	DataAccessLabelId pulumi.StringOutput `pulumi:"dataAccessLabelId"`
	// Optional. A description of the data access label for a human reader.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Output only. The short name displayed for the label as it appears on event data. This is same as data access label id.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringOutput `pulumi:"instance"`
	// Output only. The user who last updated the data access label.
	LastEditor pulumi.StringOutput `pulumi:"lastEditor"`
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringOutput `pulumi:"location"`
	// The unique resource name of the data access label. This unique identifier is generated using values provided for the URL parameters.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/dataAccessLabels/{data_access_label_id}
	Name pulumi.StringOutput `pulumi:"name"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
	// A UDM query over event data.
	UdmQuery pulumi.StringOutput `pulumi:"udmQuery"`
	// Output only. The time at which the data access label was last updated.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

## Example Usage

### Chronicle Dataaccesslabel Basic

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewDataAccessLabel(ctx, "example", &chronicle.DataAccessLabelArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			DataAccessLabelId: pulumi.String("label-id"),
			UdmQuery:          pulumi.String("principal.hostname=\"google.com\""),
			Description:       pulumi.String("label-description"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

DataAccessLabel can be imported using any of these accepted formats:

* `projects/{{project}}/locations/{{location}}/instances/{{instance}}/dataAccessLabels/{{data_access_label_id}}`

* `{{project}}/{{location}}/{{instance}}/{{data_access_label_id}}`

* `{{location}}/{{instance}}/{{data_access_label_id}}`

When using the `pulumi import` command, DataAccessLabel can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:chronicle/dataAccessLabel:DataAccessLabel default projects/{{project}}/locations/{{location}}/instances/{{instance}}/dataAccessLabels/{{data_access_label_id}} ```

```sh $ pulumi import gcp:chronicle/dataAccessLabel:DataAccessLabel default {{project}}/{{location}}/{{instance}}/{{data_access_label_id}} ```

```sh $ pulumi import gcp:chronicle/dataAccessLabel:DataAccessLabel default {{location}}/{{instance}}/{{data_access_label_id}} ```

func GetDataAccessLabel added in v8.14.0 

func GetDataAccessLabel(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DataAccessLabelState, opts ...pulumi.ResourceOption) (*DataAccessLabel, error)

GetDataAccessLabel gets an existing DataAccessLabel resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDataAccessLabel added in v8.14.0 

func NewDataAccessLabel(ctx *pulumi.Context,
	name string, args *DataAccessLabelArgs, opts ...pulumi.ResourceOption) (*DataAccessLabel, error)

NewDataAccessLabel registers a new resource with the given unique name, arguments, and options.

func (*DataAccessLabel) ElementType added in v8.14.0 

func (*DataAccessLabel) ElementType() reflect.Type

func (*DataAccessLabel) ToDataAccessLabelOutput added in v8.14.0 

func (i *DataAccessLabel) ToDataAccessLabelOutput() DataAccessLabelOutput

func (*DataAccessLabel) ToDataAccessLabelOutputWithContext added in v8.14.0 

func (i *DataAccessLabel) ToDataAccessLabelOutputWithContext(ctx context.Context) DataAccessLabelOutput

type DataAccessLabelArgs added in v8.14.0 

type DataAccessLabelArgs struct {
	// Required. The ID to use for the data access label, which will become the label's
	// display name and the final component of the label's resource name. The
	// maximum number of characters should be 63. Regex pattern is as per AIP:
	// https://google.aip.dev/122#resource-id-segments
	//
	// ***
	DataAccessLabelId pulumi.StringInput
	// Optional. A description of the data access label for a human reader.
	Description pulumi.StringPtrInput
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringInput
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
	// A UDM query over event data.
	UdmQuery pulumi.StringInput
}

The set of arguments for constructing a DataAccessLabel resource.

func (DataAccessLabelArgs) ElementType added in v8.14.0 

func (DataAccessLabelArgs) ElementType() reflect.Type

type DataAccessLabelArray added in v8.14.0 

type DataAccessLabelArray []DataAccessLabelInput

func (DataAccessLabelArray) ElementType added in v8.14.0 

func (DataAccessLabelArray) ElementType() reflect.Type

func (DataAccessLabelArray) ToDataAccessLabelArrayOutput added in v8.14.0 

func (i DataAccessLabelArray) ToDataAccessLabelArrayOutput() DataAccessLabelArrayOutput

func (DataAccessLabelArray) ToDataAccessLabelArrayOutputWithContext added in v8.14.0 

func (i DataAccessLabelArray) ToDataAccessLabelArrayOutputWithContext(ctx context.Context) DataAccessLabelArrayOutput

type DataAccessLabelArrayInput added in v8.14.0 

type DataAccessLabelArrayInput interface {
	pulumi.Input

	ToDataAccessLabelArrayOutput() DataAccessLabelArrayOutput
	ToDataAccessLabelArrayOutputWithContext(context.Context) DataAccessLabelArrayOutput
}

DataAccessLabelArrayInput is an input type that accepts DataAccessLabelArray and DataAccessLabelArrayOutput values. You can construct a concrete instance of `DataAccessLabelArrayInput` via: 

DataAccessLabelArray{ DataAccessLabelArgs{...} }

type DataAccessLabelArrayOutput added in v8.14.0 

type DataAccessLabelArrayOutput struct{ *pulumi.OutputState }

func (DataAccessLabelArrayOutput) ElementType added in v8.14.0 

func (DataAccessLabelArrayOutput) ElementType() reflect.Type

func (DataAccessLabelArrayOutput) Index added in v8.14.0 

func (o DataAccessLabelArrayOutput) Index(i pulumi.IntInput) DataAccessLabelOutput

func (DataAccessLabelArrayOutput) ToDataAccessLabelArrayOutput added in v8.14.0 

func (o DataAccessLabelArrayOutput) ToDataAccessLabelArrayOutput() DataAccessLabelArrayOutput

func (DataAccessLabelArrayOutput) ToDataAccessLabelArrayOutputWithContext added in v8.14.0 

func (o DataAccessLabelArrayOutput) ToDataAccessLabelArrayOutputWithContext(ctx context.Context) DataAccessLabelArrayOutput

type DataAccessLabelInput added in v8.14.0 

type DataAccessLabelInput interface {
	pulumi.Input

	ToDataAccessLabelOutput() DataAccessLabelOutput
	ToDataAccessLabelOutputWithContext(ctx context.Context) DataAccessLabelOutput
}

type DataAccessLabelMap added in v8.14.0 

type DataAccessLabelMap map[string]DataAccessLabelInput

func (DataAccessLabelMap) ElementType added in v8.14.0 

func (DataAccessLabelMap) ElementType() reflect.Type

func (DataAccessLabelMap) ToDataAccessLabelMapOutput added in v8.14.0 

func (i DataAccessLabelMap) ToDataAccessLabelMapOutput() DataAccessLabelMapOutput

func (DataAccessLabelMap) ToDataAccessLabelMapOutputWithContext added in v8.14.0 

func (i DataAccessLabelMap) ToDataAccessLabelMapOutputWithContext(ctx context.Context) DataAccessLabelMapOutput

type DataAccessLabelMapInput added in v8.14.0 

type DataAccessLabelMapInput interface {
	pulumi.Input

	ToDataAccessLabelMapOutput() DataAccessLabelMapOutput
	ToDataAccessLabelMapOutputWithContext(context.Context) DataAccessLabelMapOutput
}

DataAccessLabelMapInput is an input type that accepts DataAccessLabelMap and DataAccessLabelMapOutput values. You can construct a concrete instance of `DataAccessLabelMapInput` via: 

DataAccessLabelMap{ "key": DataAccessLabelArgs{...} }

type DataAccessLabelMapOutput added in v8.14.0 

type DataAccessLabelMapOutput struct{ *pulumi.OutputState }

func (DataAccessLabelMapOutput) ElementType added in v8.14.0 

func (DataAccessLabelMapOutput) ElementType() reflect.Type

func (DataAccessLabelMapOutput) MapIndex added in v8.14.0 

func (o DataAccessLabelMapOutput) MapIndex(k pulumi.StringInput) DataAccessLabelOutput

func (DataAccessLabelMapOutput) ToDataAccessLabelMapOutput added in v8.14.0 

func (o DataAccessLabelMapOutput) ToDataAccessLabelMapOutput() DataAccessLabelMapOutput

func (DataAccessLabelMapOutput) ToDataAccessLabelMapOutputWithContext added in v8.14.0 

func (o DataAccessLabelMapOutput) ToDataAccessLabelMapOutputWithContext(ctx context.Context) DataAccessLabelMapOutput

type DataAccessLabelOutput added in v8.14.0 

type DataAccessLabelOutput struct{ *pulumi.OutputState }

func (DataAccessLabelOutput) Author added in v8.14.0 

func (o DataAccessLabelOutput) Author() pulumi.StringOutput

Output only. The user who created the data access label.

func (DataAccessLabelOutput) CreateTime added in v8.14.0 

func (o DataAccessLabelOutput) CreateTime() pulumi.StringOutput

Output only. The time at which the data access label was created.

func (DataAccessLabelOutput) DataAccessLabelId added in v8.14.0 

func (o DataAccessLabelOutput) DataAccessLabelId() pulumi.StringOutput

Required. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. The maximum number of characters should be 63. Regex pattern is as per AIP: https://google.aip.dev/122#resource-id-segments

***

func (DataAccessLabelOutput) Description added in v8.14.0 

func (o DataAccessLabelOutput) Description() pulumi.StringPtrOutput

Optional. A description of the data access label for a human reader.

func (DataAccessLabelOutput) DisplayName added in v8.14.0 

func (o DataAccessLabelOutput) DisplayName() pulumi.StringOutput

Output only. The short name displayed for the label as it appears on event data. This is same as data access label id.

func (DataAccessLabelOutput) ElementType added in v8.14.0 

func (DataAccessLabelOutput) ElementType() reflect.Type

func (DataAccessLabelOutput) Instance added in v8.14.0 

func (o DataAccessLabelOutput) Instance() pulumi.StringOutput

The unique identifier for the Chronicle instance, which is the same as the customer ID.

func (DataAccessLabelOutput) LastEditor added in v8.14.0 

func (o DataAccessLabelOutput) LastEditor() pulumi.StringOutput

Output only. The user who last updated the data access label.

func (DataAccessLabelOutput) Location added in v8.14.0 

func (o DataAccessLabelOutput) Location() pulumi.StringOutput

The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".

func (DataAccessLabelOutput) Name added in v8.14.0 

func (o DataAccessLabelOutput) Name() pulumi.StringOutput

The unique resource name of the data access label. This unique identifier is generated using values provided for the URL parameters. Format: projects/{project}/locations/{location}/instances/{instance}/dataAccessLabels/{data_access_label_id}

func (DataAccessLabelOutput) Project added in v8.14.0 

func (o DataAccessLabelOutput) Project() pulumi.StringOutput

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

func (DataAccessLabelOutput) ToDataAccessLabelOutput added in v8.14.0 

func (o DataAccessLabelOutput) ToDataAccessLabelOutput() DataAccessLabelOutput

func (DataAccessLabelOutput) ToDataAccessLabelOutputWithContext added in v8.14.0 

func (o DataAccessLabelOutput) ToDataAccessLabelOutputWithContext(ctx context.Context) DataAccessLabelOutput

func (DataAccessLabelOutput) UdmQuery added in v8.14.0 

func (o DataAccessLabelOutput) UdmQuery() pulumi.StringOutput

A UDM query over event data.

func (DataAccessLabelOutput) UpdateTime added in v8.14.0 

func (o DataAccessLabelOutput) UpdateTime() pulumi.StringOutput

Output only. The time at which the data access label was last updated.

type DataAccessLabelState added in v8.14.0 

type DataAccessLabelState struct {
	// Output only. The user who created the data access label.
	Author pulumi.StringPtrInput
	// Output only. The time at which the data access label was created.
	CreateTime pulumi.StringPtrInput
	// Required. The ID to use for the data access label, which will become the label's
	// display name and the final component of the label's resource name. The
	// maximum number of characters should be 63. Regex pattern is as per AIP:
	// https://google.aip.dev/122#resource-id-segments
	//
	// ***
	DataAccessLabelId pulumi.StringPtrInput
	// Optional. A description of the data access label for a human reader.
	Description pulumi.StringPtrInput
	// Output only. The short name displayed for the label as it appears on event data. This is same as data access label id.
	DisplayName pulumi.StringPtrInput
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringPtrInput
	// Output only. The user who last updated the data access label.
	LastEditor pulumi.StringPtrInput
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringPtrInput
	// The unique resource name of the data access label. This unique identifier is generated using values provided for the URL parameters.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/dataAccessLabels/{data_access_label_id}
	Name pulumi.StringPtrInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
	// A UDM query over event data.
	UdmQuery pulumi.StringPtrInput
	// Output only. The time at which the data access label was last updated.
	UpdateTime pulumi.StringPtrInput
}

func (DataAccessLabelState) ElementType added in v8.14.0 

func (DataAccessLabelState) ElementType() reflect.Type

type DataAccessScope added in v8.14.0 

type DataAccessScope struct {
	pulumi.CustomResourceState

	// Optional. Whether or not the scope allows all labels, allowAll and
	// allowedDataAccessLabels are mutually exclusive and one of them must be
	// present. deniedDataAccessLabels can still be used along with allow_all.
	// When combined with denied_data_access_labels, access will be granted to all
	// data that doesn't have labels mentioned in denied_data_access_labels. E.g.:
	// A customer with scope with denied labels A and B and allowAll will be able
	// to see all data except data labeled with A and data labeled with B and data
	// with labels A and B.
	AllowAll pulumi.BoolPtrOutput `pulumi:"allowAll"`
	// The allowed labels for the scope. There has to be at
	// least one label allowed for the scope to be valid.
	// The logical operator for evaluation of the allowed labels is OR.
	// Either allowAll or allowedDataAccessLabels needs to be provided.
	// E.g.: A customer with scope with allowed labels A and B will be able
	// to see data with labeled with A or B or (A and B).
	// Structure is documented below.
	AllowedDataAccessLabels DataAccessScopeAllowedDataAccessLabelArrayOutput `pulumi:"allowedDataAccessLabels"`
	// Output only. The user who created the data access scope.
	Author pulumi.StringOutput `pulumi:"author"`
	// Output only. The time at which the data access scope was created.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Required. The user provided scope id which will become the last part of the name
	// of the scope resource.
	// Needs to be compliant with https://google.aip.dev/122
	//
	// ***
	DataAccessScopeId pulumi.StringOutput `pulumi:"dataAccessScopeId"`
	// Optional. The denied labels for the scope.
	// The logical operator for evaluation of the denied labels is AND.
	// E.g.: A customer with scope with denied labels A and B won't be able
	// to see data labeled with A and data labeled with B
	// and data with labels A and B.
	// Structure is documented below.
	DeniedDataAccessLabels DataAccessScopeDeniedDataAccessLabelArrayOutput `pulumi:"deniedDataAccessLabels"`
	// Optional. A description of the data access scope for a human reader.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Output only. The name to be used for display to customers of the data access scope.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringOutput `pulumi:"instance"`
	// Output only. The user who last updated the data access scope.
	LastEditor pulumi.StringOutput `pulumi:"lastEditor"`
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringOutput `pulumi:"location"`
	// The unique full name of the data access scope. This unique identifier is generated using values provided for the URL parameters.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/dataAccessScopes/{data_access_scope_id}
	Name pulumi.StringOutput `pulumi:"name"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
	// Output only. The time at which the data access scope was last updated.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

## Example Usage

### Chronicle Dataaccessscope With Logtype

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewDataAccessScope(ctx, "example", &chronicle.DataAccessScopeArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			DataAccessScopeId: pulumi.String("scope-id"),
			Description:       pulumi.String("scope-description"),
			AllowedDataAccessLabels: chronicle.DataAccessScopeAllowedDataAccessLabelArray{
				&chronicle.DataAccessScopeAllowedDataAccessLabelArgs{
					LogType: pulumi.String("GCP_CLOUDAUDIT"),
				},
				&chronicle.DataAccessScopeAllowedDataAccessLabelArgs{
					LogType: pulumi.String("GITHUB"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Chronicle Dataaccessscope With Dataaccesslabel

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewDataAccessLabel(ctx, "custom_data_access_label", &chronicle.DataAccessLabelArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			DataAccessLabelId: pulumi.String("label-id"),
			UdmQuery:          pulumi.String("principal.hostname=\"google.com\""),
		})
		if err != nil {
			return err
		}
		_, err = chronicle.NewDataAccessScope(ctx, "example", &chronicle.DataAccessScopeArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			DataAccessScopeId: pulumi.String("scope-id"),
			Description:       pulumi.String("scope-description"),
			AllowedDataAccessLabels: chronicle.DataAccessScopeAllowedDataAccessLabelArray{
				&chronicle.DataAccessScopeAllowedDataAccessLabelArgs{
					DataAccessLabel: pulumi.Any(googleChronicleDataAccessLabel.CustomDataAccessLabel.DataAccessLabelId),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Chronicle Dataaccessscope With Asset Namespace

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewDataAccessScope(ctx, "example", &chronicle.DataAccessScopeArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			DataAccessScopeId: pulumi.String("scope-id"),
			Description:       pulumi.String("scope-description"),
			AllowedDataAccessLabels: chronicle.DataAccessScopeAllowedDataAccessLabelArray{
				&chronicle.DataAccessScopeAllowedDataAccessLabelArgs{
					AssetNamespace: pulumi.String("my-namespace"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Chronicle Dataaccessscope With Ingestion Label

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewDataAccessScope(ctx, "example", &chronicle.DataAccessScopeArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			DataAccessScopeId: pulumi.String("scope-id"),
			Description:       pulumi.String("scope-description"),
			AllowedDataAccessLabels: chronicle.DataAccessScopeAllowedDataAccessLabelArray{
				&chronicle.DataAccessScopeAllowedDataAccessLabelArgs{
					IngestionLabel: &chronicle.DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs{
						IngestionLabelKey:   pulumi.String("ingestion_key"),
						IngestionLabelValue: pulumi.String("ingestion_value"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Chronicle Dataaccessscope With Denied Labels

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewDataAccessLabel(ctx, "custom_data_access_label", &chronicle.DataAccessLabelArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			DataAccessLabelId: pulumi.String("label-id"),
			UdmQuery:          pulumi.String("principal.hostname=\"google.com\""),
		})
		if err != nil {
			return err
		}
		_, err = chronicle.NewDataAccessScope(ctx, "example", &chronicle.DataAccessScopeArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			DataAccessScopeId: pulumi.String("scope-id"),
			Description:       pulumi.String("scope-description"),
			AllowAll:          pulumi.Bool(true),
			DeniedDataAccessLabels: chronicle.DataAccessScopeDeniedDataAccessLabelArray{
				&chronicle.DataAccessScopeDeniedDataAccessLabelArgs{
					LogType: pulumi.String("GCP_CLOUDAUDIT"),
				},
				&chronicle.DataAccessScopeDeniedDataAccessLabelArgs{
					DataAccessLabel: pulumi.Any(googleChronicleDataAccessLabel.CustomDataAccessLabel.DataAccessLabelId),
				},
				&chronicle.DataAccessScopeDeniedDataAccessLabelArgs{
					IngestionLabel: &chronicle.DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs{
						IngestionLabelKey:   pulumi.String("ingestion_key"),
						IngestionLabelValue: pulumi.String("ingestion_value"),
					},
				},
				&chronicle.DataAccessScopeDeniedDataAccessLabelArgs{
					AssetNamespace: pulumi.String("my-namespace"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

DataAccessScope can be imported using any of these accepted formats:

* `projects/{{project}}/locations/{{location}}/instances/{{instance}}/dataAccessScopes/{{data_access_scope_id}}`

* `{{project}}/{{location}}/{{instance}}/{{data_access_scope_id}}`

* `{{location}}/{{instance}}/{{data_access_scope_id}}`

When using the `pulumi import` command, DataAccessScope can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:chronicle/dataAccessScope:DataAccessScope default projects/{{project}}/locations/{{location}}/instances/{{instance}}/dataAccessScopes/{{data_access_scope_id}} ```

```sh $ pulumi import gcp:chronicle/dataAccessScope:DataAccessScope default {{project}}/{{location}}/{{instance}}/{{data_access_scope_id}} ```

```sh $ pulumi import gcp:chronicle/dataAccessScope:DataAccessScope default {{location}}/{{instance}}/{{data_access_scope_id}} ```

func GetDataAccessScope added in v8.14.0 

func GetDataAccessScope(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DataAccessScopeState, opts ...pulumi.ResourceOption) (*DataAccessScope, error)

GetDataAccessScope gets an existing DataAccessScope resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDataAccessScope added in v8.14.0 

func NewDataAccessScope(ctx *pulumi.Context,
	name string, args *DataAccessScopeArgs, opts ...pulumi.ResourceOption) (*DataAccessScope, error)

NewDataAccessScope registers a new resource with the given unique name, arguments, and options.

func (*DataAccessScope) ElementType added in v8.14.0 

func (*DataAccessScope) ElementType() reflect.Type

func (*DataAccessScope) ToDataAccessScopeOutput added in v8.14.0 

func (i *DataAccessScope) ToDataAccessScopeOutput() DataAccessScopeOutput

func (*DataAccessScope) ToDataAccessScopeOutputWithContext added in v8.14.0 

func (i *DataAccessScope) ToDataAccessScopeOutputWithContext(ctx context.Context) DataAccessScopeOutput

type DataAccessScopeAllowedDataAccessLabel added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabel struct {
	// The asset namespace configured in the forwarder
	// of the customer's events.
	AssetNamespace *string `pulumi:"assetNamespace"`
	// The name of the data access label.
	DataAccessLabel *string `pulumi:"dataAccessLabel"`
	// (Output)
	// Output only. The display name of the label.
	// Data access label and log types's name
	// will match the display name of the resource.
	// The asset namespace will match the namespace itself.
	// The ingestion key value pair will match the key of the tuple.
	DisplayName *string `pulumi:"displayName"`
	// Representation of an ingestion label type.
	// Structure is documented below.
	IngestionLabel *DataAccessScopeAllowedDataAccessLabelIngestionLabel `pulumi:"ingestionLabel"`
	// The name of the log type.
	LogType *string `pulumi:"logType"`
}

type DataAccessScopeAllowedDataAccessLabelArgs added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabelArgs struct {
	// The asset namespace configured in the forwarder
	// of the customer's events.
	AssetNamespace pulumi.StringPtrInput `pulumi:"assetNamespace"`
	// The name of the data access label.
	DataAccessLabel pulumi.StringPtrInput `pulumi:"dataAccessLabel"`
	// (Output)
	// Output only. The display name of the label.
	// Data access label and log types's name
	// will match the display name of the resource.
	// The asset namespace will match the namespace itself.
	// The ingestion key value pair will match the key of the tuple.
	DisplayName pulumi.StringPtrInput `pulumi:"displayName"`
	// Representation of an ingestion label type.
	// Structure is documented below.
	IngestionLabel DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrInput `pulumi:"ingestionLabel"`
	// The name of the log type.
	LogType pulumi.StringPtrInput `pulumi:"logType"`
}

func (DataAccessScopeAllowedDataAccessLabelArgs) ElementType added in v8.14.0 

func (DataAccessScopeAllowedDataAccessLabelArgs) ElementType() reflect.Type

func (DataAccessScopeAllowedDataAccessLabelArgs) ToDataAccessScopeAllowedDataAccessLabelOutput added in v8.14.0 

func (i DataAccessScopeAllowedDataAccessLabelArgs) ToDataAccessScopeAllowedDataAccessLabelOutput() DataAccessScopeAllowedDataAccessLabelOutput

func (DataAccessScopeAllowedDataAccessLabelArgs) ToDataAccessScopeAllowedDataAccessLabelOutputWithContext added in v8.14.0 

func (i DataAccessScopeAllowedDataAccessLabelArgs) ToDataAccessScopeAllowedDataAccessLabelOutputWithContext(ctx context.Context) DataAccessScopeAllowedDataAccessLabelOutput

type DataAccessScopeAllowedDataAccessLabelArray added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabelArray []DataAccessScopeAllowedDataAccessLabelInput

func (DataAccessScopeAllowedDataAccessLabelArray) ElementType added in v8.14.0 

func (DataAccessScopeAllowedDataAccessLabelArray) ElementType() reflect.Type

func (DataAccessScopeAllowedDataAccessLabelArray) ToDataAccessScopeAllowedDataAccessLabelArrayOutput added in v8.14.0 

func (i DataAccessScopeAllowedDataAccessLabelArray) ToDataAccessScopeAllowedDataAccessLabelArrayOutput() DataAccessScopeAllowedDataAccessLabelArrayOutput

func (DataAccessScopeAllowedDataAccessLabelArray) ToDataAccessScopeAllowedDataAccessLabelArrayOutputWithContext added in v8.14.0 

func (i DataAccessScopeAllowedDataAccessLabelArray) ToDataAccessScopeAllowedDataAccessLabelArrayOutputWithContext(ctx context.Context) DataAccessScopeAllowedDataAccessLabelArrayOutput

type DataAccessScopeAllowedDataAccessLabelArrayInput added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabelArrayInput interface {
	pulumi.Input

	ToDataAccessScopeAllowedDataAccessLabelArrayOutput() DataAccessScopeAllowedDataAccessLabelArrayOutput
	ToDataAccessScopeAllowedDataAccessLabelArrayOutputWithContext(context.Context) DataAccessScopeAllowedDataAccessLabelArrayOutput
}

DataAccessScopeAllowedDataAccessLabelArrayInput is an input type that accepts DataAccessScopeAllowedDataAccessLabelArray and DataAccessScopeAllowedDataAccessLabelArrayOutput values. You can construct a concrete instance of `DataAccessScopeAllowedDataAccessLabelArrayInput` via: 

DataAccessScopeAllowedDataAccessLabelArray{ DataAccessScopeAllowedDataAccessLabelArgs{...} }

type DataAccessScopeAllowedDataAccessLabelArrayOutput added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabelArrayOutput struct{ *pulumi.OutputState }

func (DataAccessScopeAllowedDataAccessLabelArrayOutput) ElementType added in v8.14.0 

func (DataAccessScopeAllowedDataAccessLabelArrayOutput) ElementType() reflect.Type

func (DataAccessScopeAllowedDataAccessLabelArrayOutput) Index added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelArrayOutput) Index(i pulumi.IntInput) DataAccessScopeAllowedDataAccessLabelOutput

func (DataAccessScopeAllowedDataAccessLabelArrayOutput) ToDataAccessScopeAllowedDataAccessLabelArrayOutput added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelArrayOutput) ToDataAccessScopeAllowedDataAccessLabelArrayOutput() DataAccessScopeAllowedDataAccessLabelArrayOutput

func (DataAccessScopeAllowedDataAccessLabelArrayOutput) ToDataAccessScopeAllowedDataAccessLabelArrayOutputWithContext added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelArrayOutput) ToDataAccessScopeAllowedDataAccessLabelArrayOutputWithContext(ctx context.Context) DataAccessScopeAllowedDataAccessLabelArrayOutput

type DataAccessScopeAllowedDataAccessLabelIngestionLabel added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabelIngestionLabel struct {
	// Required. The key of the ingestion label. Always required.
	IngestionLabelKey string `pulumi:"ingestionLabelKey"`
	// Optional. The value of the ingestion label. Optional. An object
	// with no provided value and some key provided would match
	// against the given key and ANY value.
	IngestionLabelValue *string `pulumi:"ingestionLabelValue"`
}

type DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs struct {
	// Required. The key of the ingestion label. Always required.
	IngestionLabelKey pulumi.StringInput `pulumi:"ingestionLabelKey"`
	// Optional. The value of the ingestion label. Optional. An object
	// with no provided value and some key provided would match
	// against the given key and ANY value.
	IngestionLabelValue pulumi.StringPtrInput `pulumi:"ingestionLabelValue"`
}

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs) ElementType added in v8.14.0 

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs) ElementType() reflect.Type

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelOutput added in v8.14.0 

func (i DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelOutput() DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelOutputWithContext added in v8.14.0 

func (i DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelOutputWithContext(ctx context.Context) DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput added in v8.14.0 

func (i DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput() DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutputWithContext added in v8.14.0 

func (i DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutputWithContext(ctx context.Context) DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput

type DataAccessScopeAllowedDataAccessLabelIngestionLabelInput added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabelIngestionLabelInput interface {
	pulumi.Input

	ToDataAccessScopeAllowedDataAccessLabelIngestionLabelOutput() DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput
	ToDataAccessScopeAllowedDataAccessLabelIngestionLabelOutputWithContext(context.Context) DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput
}

DataAccessScopeAllowedDataAccessLabelIngestionLabelInput is an input type that accepts DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs and DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput values. You can construct a concrete instance of `DataAccessScopeAllowedDataAccessLabelIngestionLabelInput` via: 

DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs{...}

type DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput struct{ *pulumi.OutputState }

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) ElementType added in v8.14.0 

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) ElementType() reflect.Type

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) IngestionLabelKey added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) IngestionLabelKey() pulumi.StringOutput

Required. The key of the ingestion label. Always required.

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) IngestionLabelValue added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) IngestionLabelValue() pulumi.StringPtrOutput

Optional. The value of the ingestion label. Optional. An object with no provided value and some key provided would match against the given key and ANY value.

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelOutput added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelOutput() DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelOutputWithContext added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelOutputWithContext(ctx context.Context) DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput() DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutputWithContext added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutputWithContext(ctx context.Context) DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput

type DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrInput added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrInput interface {
	pulumi.Input

	ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput() DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput
	ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutputWithContext(context.Context) DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput
}

DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrInput is an input type that accepts DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs, DataAccessScopeAllowedDataAccessLabelIngestionLabelPtr and DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput values. You can construct a concrete instance of `DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrInput` via: 

        DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs{...}

or:

        nil

func DataAccessScopeAllowedDataAccessLabelIngestionLabelPtr added in v8.14.0 

func DataAccessScopeAllowedDataAccessLabelIngestionLabelPtr(v *DataAccessScopeAllowedDataAccessLabelIngestionLabelArgs) DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrInput

type DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput struct{ *pulumi.OutputState }

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput) Elem added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput) Elem() DataAccessScopeAllowedDataAccessLabelIngestionLabelOutput

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput) ElementType added in v8.14.0 

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput) ElementType() reflect.Type

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput) IngestionLabelKey added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput) IngestionLabelKey() pulumi.StringPtrOutput

Required. The key of the ingestion label. Always required.

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput) IngestionLabelValue added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput) IngestionLabelValue() pulumi.StringPtrOutput

Optional. The value of the ingestion label. Optional. An object with no provided value and some key provided would match against the given key and ANY value.

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput() DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput

func (DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutputWithContext added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput) ToDataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutputWithContext(ctx context.Context) DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput

type DataAccessScopeAllowedDataAccessLabelInput added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabelInput interface {
	pulumi.Input

	ToDataAccessScopeAllowedDataAccessLabelOutput() DataAccessScopeAllowedDataAccessLabelOutput
	ToDataAccessScopeAllowedDataAccessLabelOutputWithContext(context.Context) DataAccessScopeAllowedDataAccessLabelOutput
}

DataAccessScopeAllowedDataAccessLabelInput is an input type that accepts DataAccessScopeAllowedDataAccessLabelArgs and DataAccessScopeAllowedDataAccessLabelOutput values. You can construct a concrete instance of `DataAccessScopeAllowedDataAccessLabelInput` via: 

DataAccessScopeAllowedDataAccessLabelArgs{...}

type DataAccessScopeAllowedDataAccessLabelOutput added in v8.14.0 

type DataAccessScopeAllowedDataAccessLabelOutput struct{ *pulumi.OutputState }

func (DataAccessScopeAllowedDataAccessLabelOutput) AssetNamespace added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelOutput) AssetNamespace() pulumi.StringPtrOutput

The asset namespace configured in the forwarder of the customer's events.

func (DataAccessScopeAllowedDataAccessLabelOutput) DataAccessLabel added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelOutput) DataAccessLabel() pulumi.StringPtrOutput

The name of the data access label.

func (DataAccessScopeAllowedDataAccessLabelOutput) DisplayName added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelOutput) DisplayName() pulumi.StringPtrOutput

(Output) Output only. The display name of the label. Data access label and log types's name will match the display name of the resource. The asset namespace will match the namespace itself. The ingestion key value pair will match the key of the tuple.

func (DataAccessScopeAllowedDataAccessLabelOutput) ElementType added in v8.14.0 

func (DataAccessScopeAllowedDataAccessLabelOutput) ElementType() reflect.Type

func (DataAccessScopeAllowedDataAccessLabelOutput) IngestionLabel added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelOutput) IngestionLabel() DataAccessScopeAllowedDataAccessLabelIngestionLabelPtrOutput

Representation of an ingestion label type. Structure is documented below.

func (DataAccessScopeAllowedDataAccessLabelOutput) LogType added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelOutput) LogType() pulumi.StringPtrOutput

The name of the log type.

func (DataAccessScopeAllowedDataAccessLabelOutput) ToDataAccessScopeAllowedDataAccessLabelOutput added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelOutput) ToDataAccessScopeAllowedDataAccessLabelOutput() DataAccessScopeAllowedDataAccessLabelOutput

func (DataAccessScopeAllowedDataAccessLabelOutput) ToDataAccessScopeAllowedDataAccessLabelOutputWithContext added in v8.14.0 

func (o DataAccessScopeAllowedDataAccessLabelOutput) ToDataAccessScopeAllowedDataAccessLabelOutputWithContext(ctx context.Context) DataAccessScopeAllowedDataAccessLabelOutput

type DataAccessScopeArgs added in v8.14.0 

type DataAccessScopeArgs struct {
	// Optional. Whether or not the scope allows all labels, allowAll and
	// allowedDataAccessLabels are mutually exclusive and one of them must be
	// present. deniedDataAccessLabels can still be used along with allow_all.
	// When combined with denied_data_access_labels, access will be granted to all
	// data that doesn't have labels mentioned in denied_data_access_labels. E.g.:
	// A customer with scope with denied labels A and B and allowAll will be able
	// to see all data except data labeled with A and data labeled with B and data
	// with labels A and B.
	AllowAll pulumi.BoolPtrInput
	// The allowed labels for the scope. There has to be at
	// least one label allowed for the scope to be valid.
	// The logical operator for evaluation of the allowed labels is OR.
	// Either allowAll or allowedDataAccessLabels needs to be provided.
	// E.g.: A customer with scope with allowed labels A and B will be able
	// to see data with labeled with A or B or (A and B).
	// Structure is documented below.
	AllowedDataAccessLabels DataAccessScopeAllowedDataAccessLabelArrayInput
	// Required. The user provided scope id which will become the last part of the name
	// of the scope resource.
	// Needs to be compliant with https://google.aip.dev/122
	//
	// ***
	DataAccessScopeId pulumi.StringInput
	// Optional. The denied labels for the scope.
	// The logical operator for evaluation of the denied labels is AND.
	// E.g.: A customer with scope with denied labels A and B won't be able
	// to see data labeled with A and data labeled with B
	// and data with labels A and B.
	// Structure is documented below.
	DeniedDataAccessLabels DataAccessScopeDeniedDataAccessLabelArrayInput
	// Optional. A description of the data access scope for a human reader.
	Description pulumi.StringPtrInput
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringInput
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
}

The set of arguments for constructing a DataAccessScope resource.

func (DataAccessScopeArgs) ElementType added in v8.14.0 

func (DataAccessScopeArgs) ElementType() reflect.Type

type DataAccessScopeArray added in v8.14.0 

type DataAccessScopeArray []DataAccessScopeInput

func (DataAccessScopeArray) ElementType added in v8.14.0 

func (DataAccessScopeArray) ElementType() reflect.Type

func (DataAccessScopeArray) ToDataAccessScopeArrayOutput added in v8.14.0 

func (i DataAccessScopeArray) ToDataAccessScopeArrayOutput() DataAccessScopeArrayOutput

func (DataAccessScopeArray) ToDataAccessScopeArrayOutputWithContext added in v8.14.0 

func (i DataAccessScopeArray) ToDataAccessScopeArrayOutputWithContext(ctx context.Context) DataAccessScopeArrayOutput

type DataAccessScopeArrayInput added in v8.14.0 

type DataAccessScopeArrayInput interface {
	pulumi.Input

	ToDataAccessScopeArrayOutput() DataAccessScopeArrayOutput
	ToDataAccessScopeArrayOutputWithContext(context.Context) DataAccessScopeArrayOutput
}

DataAccessScopeArrayInput is an input type that accepts DataAccessScopeArray and DataAccessScopeArrayOutput values. You can construct a concrete instance of `DataAccessScopeArrayInput` via: 

DataAccessScopeArray{ DataAccessScopeArgs{...} }

type DataAccessScopeArrayOutput added in v8.14.0 

type DataAccessScopeArrayOutput struct{ *pulumi.OutputState }

func (DataAccessScopeArrayOutput) ElementType added in v8.14.0 

func (DataAccessScopeArrayOutput) ElementType() reflect.Type

func (DataAccessScopeArrayOutput) Index added in v8.14.0 

func (o DataAccessScopeArrayOutput) Index(i pulumi.IntInput) DataAccessScopeOutput

func (DataAccessScopeArrayOutput) ToDataAccessScopeArrayOutput added in v8.14.0 

func (o DataAccessScopeArrayOutput) ToDataAccessScopeArrayOutput() DataAccessScopeArrayOutput

func (DataAccessScopeArrayOutput) ToDataAccessScopeArrayOutputWithContext added in v8.14.0 

func (o DataAccessScopeArrayOutput) ToDataAccessScopeArrayOutputWithContext(ctx context.Context) DataAccessScopeArrayOutput

type DataAccessScopeDeniedDataAccessLabel added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabel struct {
	// The asset namespace configured in the forwarder
	// of the customer's events.
	AssetNamespace *string `pulumi:"assetNamespace"`
	// The name of the data access label.
	DataAccessLabel *string `pulumi:"dataAccessLabel"`
	// (Output)
	// Output only. The display name of the label.
	// Data access label and log types's name
	// will match the display name of the resource.
	// The asset namespace will match the namespace itself.
	// The ingestion key value pair will match the key of the tuple.
	DisplayName *string `pulumi:"displayName"`
	// Representation of an ingestion label type.
	// Structure is documented below.
	IngestionLabel *DataAccessScopeDeniedDataAccessLabelIngestionLabel `pulumi:"ingestionLabel"`
	// The name of the log type.
	LogType *string `pulumi:"logType"`
}

type DataAccessScopeDeniedDataAccessLabelArgs added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabelArgs struct {
	// The asset namespace configured in the forwarder
	// of the customer's events.
	AssetNamespace pulumi.StringPtrInput `pulumi:"assetNamespace"`
	// The name of the data access label.
	DataAccessLabel pulumi.StringPtrInput `pulumi:"dataAccessLabel"`
	// (Output)
	// Output only. The display name of the label.
	// Data access label and log types's name
	// will match the display name of the resource.
	// The asset namespace will match the namespace itself.
	// The ingestion key value pair will match the key of the tuple.
	DisplayName pulumi.StringPtrInput `pulumi:"displayName"`
	// Representation of an ingestion label type.
	// Structure is documented below.
	IngestionLabel DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrInput `pulumi:"ingestionLabel"`
	// The name of the log type.
	LogType pulumi.StringPtrInput `pulumi:"logType"`
}

func (DataAccessScopeDeniedDataAccessLabelArgs) ElementType added in v8.14.0 

func (DataAccessScopeDeniedDataAccessLabelArgs) ElementType() reflect.Type

func (DataAccessScopeDeniedDataAccessLabelArgs) ToDataAccessScopeDeniedDataAccessLabelOutput added in v8.14.0 

func (i DataAccessScopeDeniedDataAccessLabelArgs) ToDataAccessScopeDeniedDataAccessLabelOutput() DataAccessScopeDeniedDataAccessLabelOutput

func (DataAccessScopeDeniedDataAccessLabelArgs) ToDataAccessScopeDeniedDataAccessLabelOutputWithContext added in v8.14.0 

func (i DataAccessScopeDeniedDataAccessLabelArgs) ToDataAccessScopeDeniedDataAccessLabelOutputWithContext(ctx context.Context) DataAccessScopeDeniedDataAccessLabelOutput

type DataAccessScopeDeniedDataAccessLabelArray added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabelArray []DataAccessScopeDeniedDataAccessLabelInput

func (DataAccessScopeDeniedDataAccessLabelArray) ElementType added in v8.14.0 

func (DataAccessScopeDeniedDataAccessLabelArray) ElementType() reflect.Type

func (DataAccessScopeDeniedDataAccessLabelArray) ToDataAccessScopeDeniedDataAccessLabelArrayOutput added in v8.14.0 

func (i DataAccessScopeDeniedDataAccessLabelArray) ToDataAccessScopeDeniedDataAccessLabelArrayOutput() DataAccessScopeDeniedDataAccessLabelArrayOutput

func (DataAccessScopeDeniedDataAccessLabelArray) ToDataAccessScopeDeniedDataAccessLabelArrayOutputWithContext added in v8.14.0 

func (i DataAccessScopeDeniedDataAccessLabelArray) ToDataAccessScopeDeniedDataAccessLabelArrayOutputWithContext(ctx context.Context) DataAccessScopeDeniedDataAccessLabelArrayOutput

type DataAccessScopeDeniedDataAccessLabelArrayInput added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabelArrayInput interface {
	pulumi.Input

	ToDataAccessScopeDeniedDataAccessLabelArrayOutput() DataAccessScopeDeniedDataAccessLabelArrayOutput
	ToDataAccessScopeDeniedDataAccessLabelArrayOutputWithContext(context.Context) DataAccessScopeDeniedDataAccessLabelArrayOutput
}

DataAccessScopeDeniedDataAccessLabelArrayInput is an input type that accepts DataAccessScopeDeniedDataAccessLabelArray and DataAccessScopeDeniedDataAccessLabelArrayOutput values. You can construct a concrete instance of `DataAccessScopeDeniedDataAccessLabelArrayInput` via: 

DataAccessScopeDeniedDataAccessLabelArray{ DataAccessScopeDeniedDataAccessLabelArgs{...} }

type DataAccessScopeDeniedDataAccessLabelArrayOutput added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabelArrayOutput struct{ *pulumi.OutputState }

func (DataAccessScopeDeniedDataAccessLabelArrayOutput) ElementType added in v8.14.0 

func (DataAccessScopeDeniedDataAccessLabelArrayOutput) ElementType() reflect.Type

func (DataAccessScopeDeniedDataAccessLabelArrayOutput) Index added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelArrayOutput) Index(i pulumi.IntInput) DataAccessScopeDeniedDataAccessLabelOutput

func (DataAccessScopeDeniedDataAccessLabelArrayOutput) ToDataAccessScopeDeniedDataAccessLabelArrayOutput added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelArrayOutput) ToDataAccessScopeDeniedDataAccessLabelArrayOutput() DataAccessScopeDeniedDataAccessLabelArrayOutput

func (DataAccessScopeDeniedDataAccessLabelArrayOutput) ToDataAccessScopeDeniedDataAccessLabelArrayOutputWithContext added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelArrayOutput) ToDataAccessScopeDeniedDataAccessLabelArrayOutputWithContext(ctx context.Context) DataAccessScopeDeniedDataAccessLabelArrayOutput

type DataAccessScopeDeniedDataAccessLabelIngestionLabel added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabelIngestionLabel struct {
	// Required. The key of the ingestion label. Always required.
	IngestionLabelKey string `pulumi:"ingestionLabelKey"`
	// Optional. The value of the ingestion label. Optional. An object
	// with no provided value and some key provided would match
	// against the given key and ANY value.
	IngestionLabelValue *string `pulumi:"ingestionLabelValue"`
}

type DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs struct {
	// Required. The key of the ingestion label. Always required.
	IngestionLabelKey pulumi.StringInput `pulumi:"ingestionLabelKey"`
	// Optional. The value of the ingestion label. Optional. An object
	// with no provided value and some key provided would match
	// against the given key and ANY value.
	IngestionLabelValue pulumi.StringPtrInput `pulumi:"ingestionLabelValue"`
}

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs) ElementType added in v8.14.0 

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs) ElementType() reflect.Type

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelOutput added in v8.14.0 

func (i DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelOutput() DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelOutputWithContext added in v8.14.0 

func (i DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelOutputWithContext(ctx context.Context) DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput added in v8.14.0 

func (i DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput() DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutputWithContext added in v8.14.0 

func (i DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutputWithContext(ctx context.Context) DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput

type DataAccessScopeDeniedDataAccessLabelIngestionLabelInput added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabelIngestionLabelInput interface {
	pulumi.Input

	ToDataAccessScopeDeniedDataAccessLabelIngestionLabelOutput() DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput
	ToDataAccessScopeDeniedDataAccessLabelIngestionLabelOutputWithContext(context.Context) DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput
}

DataAccessScopeDeniedDataAccessLabelIngestionLabelInput is an input type that accepts DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs and DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput values. You can construct a concrete instance of `DataAccessScopeDeniedDataAccessLabelIngestionLabelInput` via: 

DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs{...}

type DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput struct{ *pulumi.OutputState }

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) ElementType added in v8.14.0 

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) ElementType() reflect.Type

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) IngestionLabelKey added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) IngestionLabelKey() pulumi.StringOutput

Required. The key of the ingestion label. Always required.

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) IngestionLabelValue added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) IngestionLabelValue() pulumi.StringPtrOutput

Optional. The value of the ingestion label. Optional. An object with no provided value and some key provided would match against the given key and ANY value.

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelOutput added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelOutput() DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelOutputWithContext added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelOutputWithContext(ctx context.Context) DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput() DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutputWithContext added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutputWithContext(ctx context.Context) DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput

type DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrInput added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrInput interface {
	pulumi.Input

	ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput() DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput
	ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutputWithContext(context.Context) DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput
}

DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrInput is an input type that accepts DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs, DataAccessScopeDeniedDataAccessLabelIngestionLabelPtr and DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput values. You can construct a concrete instance of `DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrInput` via: 

        DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs{...}

or:

        nil

func DataAccessScopeDeniedDataAccessLabelIngestionLabelPtr added in v8.14.0 

func DataAccessScopeDeniedDataAccessLabelIngestionLabelPtr(v *DataAccessScopeDeniedDataAccessLabelIngestionLabelArgs) DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrInput

type DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput struct{ *pulumi.OutputState }

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput) Elem added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput) Elem() DataAccessScopeDeniedDataAccessLabelIngestionLabelOutput

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput) ElementType added in v8.14.0 

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput) ElementType() reflect.Type

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput) IngestionLabelKey added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput) IngestionLabelKey() pulumi.StringPtrOutput

Required. The key of the ingestion label. Always required.

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput) IngestionLabelValue added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput) IngestionLabelValue() pulumi.StringPtrOutput

Optional. The value of the ingestion label. Optional. An object with no provided value and some key provided would match against the given key and ANY value.

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput() DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput

func (DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutputWithContext added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput) ToDataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutputWithContext(ctx context.Context) DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput

type DataAccessScopeDeniedDataAccessLabelInput added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabelInput interface {
	pulumi.Input

	ToDataAccessScopeDeniedDataAccessLabelOutput() DataAccessScopeDeniedDataAccessLabelOutput
	ToDataAccessScopeDeniedDataAccessLabelOutputWithContext(context.Context) DataAccessScopeDeniedDataAccessLabelOutput
}

DataAccessScopeDeniedDataAccessLabelInput is an input type that accepts DataAccessScopeDeniedDataAccessLabelArgs and DataAccessScopeDeniedDataAccessLabelOutput values. You can construct a concrete instance of `DataAccessScopeDeniedDataAccessLabelInput` via: 

DataAccessScopeDeniedDataAccessLabelArgs{...}

type DataAccessScopeDeniedDataAccessLabelOutput added in v8.14.0 

type DataAccessScopeDeniedDataAccessLabelOutput struct{ *pulumi.OutputState }

func (DataAccessScopeDeniedDataAccessLabelOutput) AssetNamespace added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelOutput) AssetNamespace() pulumi.StringPtrOutput

The asset namespace configured in the forwarder of the customer's events.

func (DataAccessScopeDeniedDataAccessLabelOutput) DataAccessLabel added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelOutput) DataAccessLabel() pulumi.StringPtrOutput

The name of the data access label.

func (DataAccessScopeDeniedDataAccessLabelOutput) DisplayName added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelOutput) DisplayName() pulumi.StringPtrOutput

(Output) Output only. The display name of the label. Data access label and log types's name will match the display name of the resource. The asset namespace will match the namespace itself. The ingestion key value pair will match the key of the tuple.

func (DataAccessScopeDeniedDataAccessLabelOutput) ElementType added in v8.14.0 

func (DataAccessScopeDeniedDataAccessLabelOutput) ElementType() reflect.Type

func (DataAccessScopeDeniedDataAccessLabelOutput) IngestionLabel added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelOutput) IngestionLabel() DataAccessScopeDeniedDataAccessLabelIngestionLabelPtrOutput

Representation of an ingestion label type. Structure is documented below.

func (DataAccessScopeDeniedDataAccessLabelOutput) LogType added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelOutput) LogType() pulumi.StringPtrOutput

The name of the log type.

func (DataAccessScopeDeniedDataAccessLabelOutput) ToDataAccessScopeDeniedDataAccessLabelOutput added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelOutput) ToDataAccessScopeDeniedDataAccessLabelOutput() DataAccessScopeDeniedDataAccessLabelOutput

func (DataAccessScopeDeniedDataAccessLabelOutput) ToDataAccessScopeDeniedDataAccessLabelOutputWithContext added in v8.14.0 

func (o DataAccessScopeDeniedDataAccessLabelOutput) ToDataAccessScopeDeniedDataAccessLabelOutputWithContext(ctx context.Context) DataAccessScopeDeniedDataAccessLabelOutput

type DataAccessScopeInput added in v8.14.0 

type DataAccessScopeInput interface {
	pulumi.Input

	ToDataAccessScopeOutput() DataAccessScopeOutput
	ToDataAccessScopeOutputWithContext(ctx context.Context) DataAccessScopeOutput
}

type DataAccessScopeMap added in v8.14.0 

type DataAccessScopeMap map[string]DataAccessScopeInput

func (DataAccessScopeMap) ElementType added in v8.14.0 

func (DataAccessScopeMap) ElementType() reflect.Type

func (DataAccessScopeMap) ToDataAccessScopeMapOutput added in v8.14.0 

func (i DataAccessScopeMap) ToDataAccessScopeMapOutput() DataAccessScopeMapOutput

func (DataAccessScopeMap) ToDataAccessScopeMapOutputWithContext added in v8.14.0 

func (i DataAccessScopeMap) ToDataAccessScopeMapOutputWithContext(ctx context.Context) DataAccessScopeMapOutput

type DataAccessScopeMapInput added in v8.14.0 

type DataAccessScopeMapInput interface {
	pulumi.Input

	ToDataAccessScopeMapOutput() DataAccessScopeMapOutput
	ToDataAccessScopeMapOutputWithContext(context.Context) DataAccessScopeMapOutput
}

DataAccessScopeMapInput is an input type that accepts DataAccessScopeMap and DataAccessScopeMapOutput values. You can construct a concrete instance of `DataAccessScopeMapInput` via: 

DataAccessScopeMap{ "key": DataAccessScopeArgs{...} }

type DataAccessScopeMapOutput added in v8.14.0 

type DataAccessScopeMapOutput struct{ *pulumi.OutputState }

func (DataAccessScopeMapOutput) ElementType added in v8.14.0 

func (DataAccessScopeMapOutput) ElementType() reflect.Type

func (DataAccessScopeMapOutput) MapIndex added in v8.14.0 

func (o DataAccessScopeMapOutput) MapIndex(k pulumi.StringInput) DataAccessScopeOutput

func (DataAccessScopeMapOutput) ToDataAccessScopeMapOutput added in v8.14.0 

func (o DataAccessScopeMapOutput) ToDataAccessScopeMapOutput() DataAccessScopeMapOutput

func (DataAccessScopeMapOutput) ToDataAccessScopeMapOutputWithContext added in v8.14.0 

func (o DataAccessScopeMapOutput) ToDataAccessScopeMapOutputWithContext(ctx context.Context) DataAccessScopeMapOutput

type DataAccessScopeOutput added in v8.14.0 

type DataAccessScopeOutput struct{ *pulumi.OutputState }

func (DataAccessScopeOutput) AllowAll added in v8.14.0 

func (o DataAccessScopeOutput) AllowAll() pulumi.BoolPtrOutput

Optional. Whether or not the scope allows all labels, allowAll and allowedDataAccessLabels are mutually exclusive and one of them must be present. deniedDataAccessLabels can still be used along with allow_all. When combined with denied_data_access_labels, access will be granted to all data that doesn't have labels mentioned in denied_data_access_labels. E.g.: A customer with scope with denied labels A and B and allowAll will be able to see all data except data labeled with A and data labeled with B and data with labels A and B.

func (DataAccessScopeOutput) AllowedDataAccessLabels added in v8.14.0 

func (o DataAccessScopeOutput) AllowedDataAccessLabels() DataAccessScopeAllowedDataAccessLabelArrayOutput

The allowed labels for the scope. There has to be at least one label allowed for the scope to be valid. The logical operator for evaluation of the allowed labels is OR. Either allowAll or allowedDataAccessLabels needs to be provided. E.g.: A customer with scope with allowed labels A and B will be able to see data with labeled with A or B or (A and B). Structure is documented below.

func (DataAccessScopeOutput) Author added in v8.14.0 

func (o DataAccessScopeOutput) Author() pulumi.StringOutput

Output only. The user who created the data access scope.

func (DataAccessScopeOutput) CreateTime added in v8.14.0 

func (o DataAccessScopeOutput) CreateTime() pulumi.StringOutput

Output only. The time at which the data access scope was created.

func (DataAccessScopeOutput) DataAccessScopeId added in v8.14.0 

func (o DataAccessScopeOutput) DataAccessScopeId() pulumi.StringOutput

Required. The user provided scope id which will become the last part of the name of the scope resource. Needs to be compliant with https://google.aip.dev/122

***

func (DataAccessScopeOutput) DeniedDataAccessLabels added in v8.14.0 

func (o DataAccessScopeOutput) DeniedDataAccessLabels() DataAccessScopeDeniedDataAccessLabelArrayOutput

Optional. The denied labels for the scope. The logical operator for evaluation of the denied labels is AND. E.g.: A customer with scope with denied labels A and B won't be able to see data labeled with A and data labeled with B and data with labels A and B. Structure is documented below.

func (DataAccessScopeOutput) Description added in v8.14.0 

func (o DataAccessScopeOutput) Description() pulumi.StringPtrOutput

Optional. A description of the data access scope for a human reader.

func (DataAccessScopeOutput) DisplayName added in v8.14.0 

func (o DataAccessScopeOutput) DisplayName() pulumi.StringOutput

Output only. The name to be used for display to customers of the data access scope.

func (DataAccessScopeOutput) ElementType added in v8.14.0 

func (DataAccessScopeOutput) ElementType() reflect.Type

func (DataAccessScopeOutput) Instance added in v8.14.0 

func (o DataAccessScopeOutput) Instance() pulumi.StringOutput

The unique identifier for the Chronicle instance, which is the same as the customer ID.

func (DataAccessScopeOutput) LastEditor added in v8.14.0 

func (o DataAccessScopeOutput) LastEditor() pulumi.StringOutput

Output only. The user who last updated the data access scope.

func (DataAccessScopeOutput) Location added in v8.14.0 

func (o DataAccessScopeOutput) Location() pulumi.StringOutput

The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".

func (DataAccessScopeOutput) Name added in v8.14.0 

func (o DataAccessScopeOutput) Name() pulumi.StringOutput

The unique full name of the data access scope. This unique identifier is generated using values provided for the URL parameters. Format: projects/{project}/locations/{location}/instances/{instance}/dataAccessScopes/{data_access_scope_id}

func (DataAccessScopeOutput) Project added in v8.14.0 

func (o DataAccessScopeOutput) Project() pulumi.StringOutput

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

func (DataAccessScopeOutput) ToDataAccessScopeOutput added in v8.14.0 

func (o DataAccessScopeOutput) ToDataAccessScopeOutput() DataAccessScopeOutput

func (DataAccessScopeOutput) ToDataAccessScopeOutputWithContext added in v8.14.0 

func (o DataAccessScopeOutput) ToDataAccessScopeOutputWithContext(ctx context.Context) DataAccessScopeOutput

func (DataAccessScopeOutput) UpdateTime added in v8.14.0 

func (o DataAccessScopeOutput) UpdateTime() pulumi.StringOutput

Output only. The time at which the data access scope was last updated.

type DataAccessScopeState added in v8.14.0 

type DataAccessScopeState struct {
	// Optional. Whether or not the scope allows all labels, allowAll and
	// allowedDataAccessLabels are mutually exclusive and one of them must be
	// present. deniedDataAccessLabels can still be used along with allow_all.
	// When combined with denied_data_access_labels, access will be granted to all
	// data that doesn't have labels mentioned in denied_data_access_labels. E.g.:
	// A customer with scope with denied labels A and B and allowAll will be able
	// to see all data except data labeled with A and data labeled with B and data
	// with labels A and B.
	AllowAll pulumi.BoolPtrInput
	// The allowed labels for the scope. There has to be at
	// least one label allowed for the scope to be valid.
	// The logical operator for evaluation of the allowed labels is OR.
	// Either allowAll or allowedDataAccessLabels needs to be provided.
	// E.g.: A customer with scope with allowed labels A and B will be able
	// to see data with labeled with A or B or (A and B).
	// Structure is documented below.
	AllowedDataAccessLabels DataAccessScopeAllowedDataAccessLabelArrayInput
	// Output only. The user who created the data access scope.
	Author pulumi.StringPtrInput
	// Output only. The time at which the data access scope was created.
	CreateTime pulumi.StringPtrInput
	// Required. The user provided scope id which will become the last part of the name
	// of the scope resource.
	// Needs to be compliant with https://google.aip.dev/122
	//
	// ***
	DataAccessScopeId pulumi.StringPtrInput
	// Optional. The denied labels for the scope.
	// The logical operator for evaluation of the denied labels is AND.
	// E.g.: A customer with scope with denied labels A and B won't be able
	// to see data labeled with A and data labeled with B
	// and data with labels A and B.
	// Structure is documented below.
	DeniedDataAccessLabels DataAccessScopeDeniedDataAccessLabelArrayInput
	// Optional. A description of the data access scope for a human reader.
	Description pulumi.StringPtrInput
	// Output only. The name to be used for display to customers of the data access scope.
	DisplayName pulumi.StringPtrInput
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringPtrInput
	// Output only. The user who last updated the data access scope.
	LastEditor pulumi.StringPtrInput
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringPtrInput
	// The unique full name of the data access scope. This unique identifier is generated using values provided for the URL parameters.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/dataAccessScopes/{data_access_scope_id}
	Name pulumi.StringPtrInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
	// Output only. The time at which the data access scope was last updated.
	UpdateTime pulumi.StringPtrInput
}

func (DataAccessScopeState) ElementType added in v8.14.0 

func (DataAccessScopeState) ElementType() reflect.Type

type ReferenceList added in v8.15.0 

type ReferenceList struct {
	pulumi.CustomResourceState

	// Required. A user-provided description of the reference list.
	Description pulumi.StringOutput `pulumi:"description"`
	// Output only. The unique display name of the reference list.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// Required. The entries of the reference list.
	// When listed, they are returned in the order that was specified at creation
	// or update. The combined size of the values of the reference list may not
	// exceed 6MB.
	// This is returned only when the view is REFERENCE_LIST_VIEW_FULL.
	// Structure is documented below.
	Entries ReferenceListEntryArrayOutput `pulumi:"entries"`
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringOutput `pulumi:"instance"`
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringOutput `pulumi:"location"`
	// Output only. The resource name of the reference list.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/referenceLists/{reference_list}
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// Required. The ID to use for the reference list. This is also the display name for
	// the reference list. It must satisfy the following requirements:
	// - Starts with letter.
	// - Contains only letters, numbers and underscore.
	// - Has length < 256.
	// - Must be unique.
	ReferenceListId pulumi.StringOutput `pulumi:"referenceListId"`
	// Output only. The timestamp when the reference list was last updated.
	RevisionCreateTime pulumi.StringOutput `pulumi:"revisionCreateTime"`
	// Output only. The count of self-authored rules using the reference list.
	RuleAssociationsCount pulumi.IntOutput `pulumi:"ruleAssociationsCount"`
	// Output only. The resource names for the associated self-authored Rules that use this
	// reference list.
	// This is returned only when the view is REFERENCE_LIST_VIEW_FULL.
	Rules pulumi.StringArrayOutput `pulumi:"rules"`
	// ScopeInfo specifies the scope info of the reference list.
	// Structure is documented below.
	ScopeInfos ReferenceListScopeInfoArrayOutput `pulumi:"scopeInfos"`
	// Possible values:
	// REFERENCE_LIST_SYNTAX_TYPE_PLAIN_TEXT_STRING
	// REFERENCE_LIST_SYNTAX_TYPE_REGEX
	// REFERENCE_LIST_SYNTAX_TYPE_CIDR
	SyntaxType pulumi.StringOutput `pulumi:"syntaxType"`
}

## Example Usage

### Chronicle Referencelist Basic

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewReferenceList(ctx, "example", &chronicle.ReferenceListArgs{
			Location:        pulumi.String("us"),
			Instance:        pulumi.String("00000000-0000-0000-0000-000000000000"),
			ReferenceListId: pulumi.String("reference_list_id"),
			Description:     pulumi.String("referencelist-description"),
			Entries: chronicle.ReferenceListEntryArray{
				&chronicle.ReferenceListEntryArgs{
					Value: pulumi.String("referencelist-entry-value"),
				},
			},
			SyntaxType: pulumi.String("REFERENCE_LIST_SYNTAX_TYPE_PLAIN_TEXT_STRING"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

ReferenceList can be imported using any of these accepted formats:

* `projects/{{project}}/locations/{{location}}/instances/{{instance}}/referenceLists/{{reference_list_id}}`

* `{{project}}/{{location}}/{{instance}}/{{reference_list_id}}`

* `{{location}}/{{instance}}/{{reference_list_id}}`

When using the `pulumi import` command, ReferenceList can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:chronicle/referenceList:ReferenceList default projects/{{project}}/locations/{{location}}/instances/{{instance}}/referenceLists/{{reference_list_id}} ```

```sh $ pulumi import gcp:chronicle/referenceList:ReferenceList default {{project}}/{{location}}/{{instance}}/{{reference_list_id}} ```

```sh $ pulumi import gcp:chronicle/referenceList:ReferenceList default {{location}}/{{instance}}/{{reference_list_id}} ```

func GetReferenceList added in v8.15.0 

func GetReferenceList(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ReferenceListState, opts ...pulumi.ResourceOption) (*ReferenceList, error)

GetReferenceList gets an existing ReferenceList resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewReferenceList added in v8.15.0 

func NewReferenceList(ctx *pulumi.Context,
	name string, args *ReferenceListArgs, opts ...pulumi.ResourceOption) (*ReferenceList, error)

NewReferenceList registers a new resource with the given unique name, arguments, and options.

func (*ReferenceList) ElementType added in v8.15.0 

func (*ReferenceList) ElementType() reflect.Type

func (*ReferenceList) ToReferenceListOutput added in v8.15.0 

func (i *ReferenceList) ToReferenceListOutput() ReferenceListOutput

func (*ReferenceList) ToReferenceListOutputWithContext added in v8.15.0 

func (i *ReferenceList) ToReferenceListOutputWithContext(ctx context.Context) ReferenceListOutput

type ReferenceListArgs added in v8.15.0 

type ReferenceListArgs struct {
	// Required. A user-provided description of the reference list.
	Description pulumi.StringInput
	// Required. The entries of the reference list.
	// When listed, they are returned in the order that was specified at creation
	// or update. The combined size of the values of the reference list may not
	// exceed 6MB.
	// This is returned only when the view is REFERENCE_LIST_VIEW_FULL.
	// Structure is documented below.
	Entries ReferenceListEntryArrayInput
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringInput
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringInput
	Project  pulumi.StringPtrInput
	// Required. The ID to use for the reference list. This is also the display name for
	// the reference list. It must satisfy the following requirements:
	// - Starts with letter.
	// - Contains only letters, numbers and underscore.
	// - Has length < 256.
	// - Must be unique.
	ReferenceListId pulumi.StringInput
	// Possible values:
	// REFERENCE_LIST_SYNTAX_TYPE_PLAIN_TEXT_STRING
	// REFERENCE_LIST_SYNTAX_TYPE_REGEX
	// REFERENCE_LIST_SYNTAX_TYPE_CIDR
	SyntaxType pulumi.StringInput
}

The set of arguments for constructing a ReferenceList resource.

func (ReferenceListArgs) ElementType added in v8.15.0 

func (ReferenceListArgs) ElementType() reflect.Type

type ReferenceListArray added in v8.15.0 

type ReferenceListArray []ReferenceListInput

func (ReferenceListArray) ElementType added in v8.15.0 

func (ReferenceListArray) ElementType() reflect.Type

func (ReferenceListArray) ToReferenceListArrayOutput added in v8.15.0 

func (i ReferenceListArray) ToReferenceListArrayOutput() ReferenceListArrayOutput

func (ReferenceListArray) ToReferenceListArrayOutputWithContext added in v8.15.0 

func (i ReferenceListArray) ToReferenceListArrayOutputWithContext(ctx context.Context) ReferenceListArrayOutput

type ReferenceListArrayInput added in v8.15.0 

type ReferenceListArrayInput interface {
	pulumi.Input

	ToReferenceListArrayOutput() ReferenceListArrayOutput
	ToReferenceListArrayOutputWithContext(context.Context) ReferenceListArrayOutput
}

ReferenceListArrayInput is an input type that accepts ReferenceListArray and ReferenceListArrayOutput values. You can construct a concrete instance of `ReferenceListArrayInput` via: 

ReferenceListArray{ ReferenceListArgs{...} }

type ReferenceListArrayOutput added in v8.15.0 

type ReferenceListArrayOutput struct{ *pulumi.OutputState }

func (ReferenceListArrayOutput) ElementType added in v8.15.0 

func (ReferenceListArrayOutput) ElementType() reflect.Type

func (ReferenceListArrayOutput) Index added in v8.15.0 

func (o ReferenceListArrayOutput) Index(i pulumi.IntInput) ReferenceListOutput

func (ReferenceListArrayOutput) ToReferenceListArrayOutput added in v8.15.0 

func (o ReferenceListArrayOutput) ToReferenceListArrayOutput() ReferenceListArrayOutput

func (ReferenceListArrayOutput) ToReferenceListArrayOutputWithContext added in v8.15.0 

func (o ReferenceListArrayOutput) ToReferenceListArrayOutputWithContext(ctx context.Context) ReferenceListArrayOutput

type ReferenceListEntry added in v8.15.0 

type ReferenceListEntry struct {
	// Required. The value of the entry. Maximum length is 512 characters.
	//
	// ***
	Value string `pulumi:"value"`
}

type ReferenceListEntryArgs added in v8.15.0 

type ReferenceListEntryArgs struct {
	// Required. The value of the entry. Maximum length is 512 characters.
	//
	// ***
	Value pulumi.StringInput `pulumi:"value"`
}

func (ReferenceListEntryArgs) ElementType added in v8.15.0 

func (ReferenceListEntryArgs) ElementType() reflect.Type

func (ReferenceListEntryArgs) ToReferenceListEntryOutput added in v8.15.0 

func (i ReferenceListEntryArgs) ToReferenceListEntryOutput() ReferenceListEntryOutput

func (ReferenceListEntryArgs) ToReferenceListEntryOutputWithContext added in v8.15.0 

func (i ReferenceListEntryArgs) ToReferenceListEntryOutputWithContext(ctx context.Context) ReferenceListEntryOutput

type ReferenceListEntryArray added in v8.15.0 

type ReferenceListEntryArray []ReferenceListEntryInput

func (ReferenceListEntryArray) ElementType added in v8.15.0 

func (ReferenceListEntryArray) ElementType() reflect.Type

func (ReferenceListEntryArray) ToReferenceListEntryArrayOutput added in v8.15.0 

func (i ReferenceListEntryArray) ToReferenceListEntryArrayOutput() ReferenceListEntryArrayOutput

func (ReferenceListEntryArray) ToReferenceListEntryArrayOutputWithContext added in v8.15.0 

func (i ReferenceListEntryArray) ToReferenceListEntryArrayOutputWithContext(ctx context.Context) ReferenceListEntryArrayOutput

type ReferenceListEntryArrayInput added in v8.15.0 

type ReferenceListEntryArrayInput interface {
	pulumi.Input

	ToReferenceListEntryArrayOutput() ReferenceListEntryArrayOutput
	ToReferenceListEntryArrayOutputWithContext(context.Context) ReferenceListEntryArrayOutput
}

ReferenceListEntryArrayInput is an input type that accepts ReferenceListEntryArray and ReferenceListEntryArrayOutput values. You can construct a concrete instance of `ReferenceListEntryArrayInput` via: 

ReferenceListEntryArray{ ReferenceListEntryArgs{...} }

type ReferenceListEntryArrayOutput added in v8.15.0 

type ReferenceListEntryArrayOutput struct{ *pulumi.OutputState }

func (ReferenceListEntryArrayOutput) ElementType added in v8.15.0 

func (ReferenceListEntryArrayOutput) ElementType() reflect.Type

func (ReferenceListEntryArrayOutput) Index added in v8.15.0 

func (o ReferenceListEntryArrayOutput) Index(i pulumi.IntInput) ReferenceListEntryOutput

func (ReferenceListEntryArrayOutput) ToReferenceListEntryArrayOutput added in v8.15.0 

func (o ReferenceListEntryArrayOutput) ToReferenceListEntryArrayOutput() ReferenceListEntryArrayOutput

func (ReferenceListEntryArrayOutput) ToReferenceListEntryArrayOutputWithContext added in v8.15.0 

func (o ReferenceListEntryArrayOutput) ToReferenceListEntryArrayOutputWithContext(ctx context.Context) ReferenceListEntryArrayOutput

type ReferenceListEntryInput added in v8.15.0 

type ReferenceListEntryInput interface {
	pulumi.Input

	ToReferenceListEntryOutput() ReferenceListEntryOutput
	ToReferenceListEntryOutputWithContext(context.Context) ReferenceListEntryOutput
}

ReferenceListEntryInput is an input type that accepts ReferenceListEntryArgs and ReferenceListEntryOutput values. You can construct a concrete instance of `ReferenceListEntryInput` via: 

ReferenceListEntryArgs{...}

type ReferenceListEntryOutput added in v8.15.0 

type ReferenceListEntryOutput struct{ *pulumi.OutputState }

func (ReferenceListEntryOutput) ElementType added in v8.15.0 

func (ReferenceListEntryOutput) ElementType() reflect.Type

func (ReferenceListEntryOutput) ToReferenceListEntryOutput added in v8.15.0 

func (o ReferenceListEntryOutput) ToReferenceListEntryOutput() ReferenceListEntryOutput

func (ReferenceListEntryOutput) ToReferenceListEntryOutputWithContext added in v8.15.0 

func (o ReferenceListEntryOutput) ToReferenceListEntryOutputWithContext(ctx context.Context) ReferenceListEntryOutput

func (ReferenceListEntryOutput) Value added in v8.15.0 

func (o ReferenceListEntryOutput) Value() pulumi.StringOutput

Required. The value of the entry. Maximum length is 512 characters.

***

type ReferenceListInput added in v8.15.0 

type ReferenceListInput interface {
	pulumi.Input

	ToReferenceListOutput() ReferenceListOutput
	ToReferenceListOutputWithContext(ctx context.Context) ReferenceListOutput
}

type ReferenceListMap added in v8.15.0 

type ReferenceListMap map[string]ReferenceListInput

func (ReferenceListMap) ElementType added in v8.15.0 

func (ReferenceListMap) ElementType() reflect.Type

func (ReferenceListMap) ToReferenceListMapOutput added in v8.15.0 

func (i ReferenceListMap) ToReferenceListMapOutput() ReferenceListMapOutput

func (ReferenceListMap) ToReferenceListMapOutputWithContext added in v8.15.0 

func (i ReferenceListMap) ToReferenceListMapOutputWithContext(ctx context.Context) ReferenceListMapOutput

type ReferenceListMapInput added in v8.15.0 

type ReferenceListMapInput interface {
	pulumi.Input

	ToReferenceListMapOutput() ReferenceListMapOutput
	ToReferenceListMapOutputWithContext(context.Context) ReferenceListMapOutput
}

ReferenceListMapInput is an input type that accepts ReferenceListMap and ReferenceListMapOutput values. You can construct a concrete instance of `ReferenceListMapInput` via: 

ReferenceListMap{ "key": ReferenceListArgs{...} }

type ReferenceListMapOutput added in v8.15.0 

type ReferenceListMapOutput struct{ *pulumi.OutputState }

func (ReferenceListMapOutput) ElementType added in v8.15.0 

func (ReferenceListMapOutput) ElementType() reflect.Type

func (ReferenceListMapOutput) MapIndex added in v8.15.0 

func (o ReferenceListMapOutput) MapIndex(k pulumi.StringInput) ReferenceListOutput

func (ReferenceListMapOutput) ToReferenceListMapOutput added in v8.15.0 

func (o ReferenceListMapOutput) ToReferenceListMapOutput() ReferenceListMapOutput

func (ReferenceListMapOutput) ToReferenceListMapOutputWithContext added in v8.15.0 

func (o ReferenceListMapOutput) ToReferenceListMapOutputWithContext(ctx context.Context) ReferenceListMapOutput

type ReferenceListOutput added in v8.15.0 

type ReferenceListOutput struct{ *pulumi.OutputState }

func (ReferenceListOutput) Description added in v8.15.0 

func (o ReferenceListOutput) Description() pulumi.StringOutput

Required. A user-provided description of the reference list.

func (ReferenceListOutput) DisplayName added in v8.15.0 

func (o ReferenceListOutput) DisplayName() pulumi.StringOutput

Output only. The unique display name of the reference list.

func (ReferenceListOutput) ElementType added in v8.15.0 

func (ReferenceListOutput) ElementType() reflect.Type

func (ReferenceListOutput) Entries added in v8.15.0 

func (o ReferenceListOutput) Entries() ReferenceListEntryArrayOutput

Required. The entries of the reference list. When listed, they are returned in the order that was specified at creation or update. The combined size of the values of the reference list may not exceed 6MB. This is returned only when the view is REFERENCE_LIST_VIEW_FULL. Structure is documented below.

func (ReferenceListOutput) Instance added in v8.15.0 

func (o ReferenceListOutput) Instance() pulumi.StringOutput

The unique identifier for the Chronicle instance, which is the same as the customer ID.

func (ReferenceListOutput) Location added in v8.15.0 

func (o ReferenceListOutput) Location() pulumi.StringOutput

The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".

func (ReferenceListOutput) Name added in v8.15.0 

func (o ReferenceListOutput) Name() pulumi.StringOutput

Output only. The resource name of the reference list. Format: projects/{project}/locations/{location}/instances/{instance}/referenceLists/{reference_list}

func (ReferenceListOutput) Project added in v8.15.0 

func (o ReferenceListOutput) Project() pulumi.StringOutput

func (ReferenceListOutput) ReferenceListId added in v8.15.0 

func (o ReferenceListOutput) ReferenceListId() pulumi.StringOutput

Required. The ID to use for the reference list. This is also the display name for the reference list. It must satisfy the following requirements: - Starts with letter. - Contains only letters, numbers and underscore. - Has length < 256. - Must be unique.

func (ReferenceListOutput) RevisionCreateTime added in v8.15.0 

func (o ReferenceListOutput) RevisionCreateTime() pulumi.StringOutput

Output only. The timestamp when the reference list was last updated.

func (ReferenceListOutput) RuleAssociationsCount added in v8.15.0 

func (o ReferenceListOutput) RuleAssociationsCount() pulumi.IntOutput

Output only. The count of self-authored rules using the reference list.

func (ReferenceListOutput) Rules added in v8.15.0 

func (o ReferenceListOutput) Rules() pulumi.StringArrayOutput

Output only. The resource names for the associated self-authored Rules that use this reference list. This is returned only when the view is REFERENCE_LIST_VIEW_FULL.

func (ReferenceListOutput) ScopeInfos added in v8.15.0 

func (o ReferenceListOutput) ScopeInfos() ReferenceListScopeInfoArrayOutput

ScopeInfo specifies the scope info of the reference list. Structure is documented below.

func (ReferenceListOutput) SyntaxType added in v8.15.0 

func (o ReferenceListOutput) SyntaxType() pulumi.StringOutput

Possible values: REFERENCE_LIST_SYNTAX_TYPE_PLAIN_TEXT_STRING REFERENCE_LIST_SYNTAX_TYPE_REGEX REFERENCE_LIST_SYNTAX_TYPE_CIDR

func (ReferenceListOutput) ToReferenceListOutput added in v8.15.0 

func (o ReferenceListOutput) ToReferenceListOutput() ReferenceListOutput

func (ReferenceListOutput) ToReferenceListOutputWithContext added in v8.15.0 

func (o ReferenceListOutput) ToReferenceListOutputWithContext(ctx context.Context) ReferenceListOutput

type ReferenceListScopeInfo added in v8.15.0 

type ReferenceListScopeInfo struct {
	// ReferenceListScope specifies the list of scope names of the reference list.
	// Structure is documented below.
	ReferenceListScope ReferenceListScopeInfoReferenceListScope `pulumi:"referenceListScope"`
}

type ReferenceListScopeInfoArgs added in v8.15.0 

type ReferenceListScopeInfoArgs struct {
	// ReferenceListScope specifies the list of scope names of the reference list.
	// Structure is documented below.
	ReferenceListScope ReferenceListScopeInfoReferenceListScopeInput `pulumi:"referenceListScope"`
}

func (ReferenceListScopeInfoArgs) ElementType added in v8.15.0 

func (ReferenceListScopeInfoArgs) ElementType() reflect.Type

func (ReferenceListScopeInfoArgs) ToReferenceListScopeInfoOutput added in v8.15.0 

func (i ReferenceListScopeInfoArgs) ToReferenceListScopeInfoOutput() ReferenceListScopeInfoOutput

func (ReferenceListScopeInfoArgs) ToReferenceListScopeInfoOutputWithContext added in v8.15.0 

func (i ReferenceListScopeInfoArgs) ToReferenceListScopeInfoOutputWithContext(ctx context.Context) ReferenceListScopeInfoOutput

type ReferenceListScopeInfoArray added in v8.15.0 

type ReferenceListScopeInfoArray []ReferenceListScopeInfoInput

func (ReferenceListScopeInfoArray) ElementType added in v8.15.0 

func (ReferenceListScopeInfoArray) ElementType() reflect.Type

func (ReferenceListScopeInfoArray) ToReferenceListScopeInfoArrayOutput added in v8.15.0 

func (i ReferenceListScopeInfoArray) ToReferenceListScopeInfoArrayOutput() ReferenceListScopeInfoArrayOutput

func (ReferenceListScopeInfoArray) ToReferenceListScopeInfoArrayOutputWithContext added in v8.15.0 

func (i ReferenceListScopeInfoArray) ToReferenceListScopeInfoArrayOutputWithContext(ctx context.Context) ReferenceListScopeInfoArrayOutput

type ReferenceListScopeInfoArrayInput added in v8.15.0 

type ReferenceListScopeInfoArrayInput interface {
	pulumi.Input

	ToReferenceListScopeInfoArrayOutput() ReferenceListScopeInfoArrayOutput
	ToReferenceListScopeInfoArrayOutputWithContext(context.Context) ReferenceListScopeInfoArrayOutput
}

ReferenceListScopeInfoArrayInput is an input type that accepts ReferenceListScopeInfoArray and ReferenceListScopeInfoArrayOutput values. You can construct a concrete instance of `ReferenceListScopeInfoArrayInput` via: 

ReferenceListScopeInfoArray{ ReferenceListScopeInfoArgs{...} }

type ReferenceListScopeInfoArrayOutput added in v8.15.0 

type ReferenceListScopeInfoArrayOutput struct{ *pulumi.OutputState }

func (ReferenceListScopeInfoArrayOutput) ElementType added in v8.15.0 

func (ReferenceListScopeInfoArrayOutput) ElementType() reflect.Type

func (ReferenceListScopeInfoArrayOutput) Index added in v8.15.0 

func (o ReferenceListScopeInfoArrayOutput) Index(i pulumi.IntInput) ReferenceListScopeInfoOutput

func (ReferenceListScopeInfoArrayOutput) ToReferenceListScopeInfoArrayOutput added in v8.15.0 

func (o ReferenceListScopeInfoArrayOutput) ToReferenceListScopeInfoArrayOutput() ReferenceListScopeInfoArrayOutput

func (ReferenceListScopeInfoArrayOutput) ToReferenceListScopeInfoArrayOutputWithContext added in v8.15.0 

func (o ReferenceListScopeInfoArrayOutput) ToReferenceListScopeInfoArrayOutputWithContext(ctx context.Context) ReferenceListScopeInfoArrayOutput

type ReferenceListScopeInfoInput added in v8.15.0 

type ReferenceListScopeInfoInput interface {
	pulumi.Input

	ToReferenceListScopeInfoOutput() ReferenceListScopeInfoOutput
	ToReferenceListScopeInfoOutputWithContext(context.Context) ReferenceListScopeInfoOutput
}

ReferenceListScopeInfoInput is an input type that accepts ReferenceListScopeInfoArgs and ReferenceListScopeInfoOutput values. You can construct a concrete instance of `ReferenceListScopeInfoInput` via: 

ReferenceListScopeInfoArgs{...}

type ReferenceListScopeInfoOutput added in v8.15.0 

type ReferenceListScopeInfoOutput struct{ *pulumi.OutputState }

func (ReferenceListScopeInfoOutput) ElementType added in v8.15.0 

func (ReferenceListScopeInfoOutput) ElementType() reflect.Type

func (ReferenceListScopeInfoOutput) ReferenceListScope added in v8.15.0 

func (o ReferenceListScopeInfoOutput) ReferenceListScope() ReferenceListScopeInfoReferenceListScopeOutput

ReferenceListScope specifies the list of scope names of the reference list. Structure is documented below.

func (ReferenceListScopeInfoOutput) ToReferenceListScopeInfoOutput added in v8.15.0 

func (o ReferenceListScopeInfoOutput) ToReferenceListScopeInfoOutput() ReferenceListScopeInfoOutput

func (ReferenceListScopeInfoOutput) ToReferenceListScopeInfoOutputWithContext added in v8.15.0 

func (o ReferenceListScopeInfoOutput) ToReferenceListScopeInfoOutputWithContext(ctx context.Context) ReferenceListScopeInfoOutput

type ReferenceListScopeInfoReferenceListScope added in v8.15.0 

type ReferenceListScopeInfoReferenceListScope struct {
	// Optional. The list of scope names of the reference list. The scope names should be
	// full resource names and should be of the format:
	// "projects/{project}/locations/{location}/instances/{instance}/dataAccessScopes/{scope_name}".
	ScopeNames []string `pulumi:"scopeNames"`
}

type ReferenceListScopeInfoReferenceListScopeArgs added in v8.15.0 

type ReferenceListScopeInfoReferenceListScopeArgs struct {
	// Optional. The list of scope names of the reference list. The scope names should be
	// full resource names and should be of the format:
	// "projects/{project}/locations/{location}/instances/{instance}/dataAccessScopes/{scope_name}".
	ScopeNames pulumi.StringArrayInput `pulumi:"scopeNames"`
}

func (ReferenceListScopeInfoReferenceListScopeArgs) ElementType added in v8.15.0 

func (ReferenceListScopeInfoReferenceListScopeArgs) ElementType() reflect.Type

func (ReferenceListScopeInfoReferenceListScopeArgs) ToReferenceListScopeInfoReferenceListScopeOutput added in v8.15.0 

func (i ReferenceListScopeInfoReferenceListScopeArgs) ToReferenceListScopeInfoReferenceListScopeOutput() ReferenceListScopeInfoReferenceListScopeOutput

func (ReferenceListScopeInfoReferenceListScopeArgs) ToReferenceListScopeInfoReferenceListScopeOutputWithContext added in v8.15.0 

func (i ReferenceListScopeInfoReferenceListScopeArgs) ToReferenceListScopeInfoReferenceListScopeOutputWithContext(ctx context.Context) ReferenceListScopeInfoReferenceListScopeOutput

type ReferenceListScopeInfoReferenceListScopeInput added in v8.15.0 

type ReferenceListScopeInfoReferenceListScopeInput interface {
	pulumi.Input

	ToReferenceListScopeInfoReferenceListScopeOutput() ReferenceListScopeInfoReferenceListScopeOutput
	ToReferenceListScopeInfoReferenceListScopeOutputWithContext(context.Context) ReferenceListScopeInfoReferenceListScopeOutput
}

ReferenceListScopeInfoReferenceListScopeInput is an input type that accepts ReferenceListScopeInfoReferenceListScopeArgs and ReferenceListScopeInfoReferenceListScopeOutput values. You can construct a concrete instance of `ReferenceListScopeInfoReferenceListScopeInput` via: 

ReferenceListScopeInfoReferenceListScopeArgs{...}

type ReferenceListScopeInfoReferenceListScopeOutput added in v8.15.0 

type ReferenceListScopeInfoReferenceListScopeOutput struct{ *pulumi.OutputState }

func (ReferenceListScopeInfoReferenceListScopeOutput) ElementType added in v8.15.0 

func (ReferenceListScopeInfoReferenceListScopeOutput) ElementType() reflect.Type

func (ReferenceListScopeInfoReferenceListScopeOutput) ScopeNames added in v8.15.0 

func (o ReferenceListScopeInfoReferenceListScopeOutput) ScopeNames() pulumi.StringArrayOutput

Optional. The list of scope names of the reference list. The scope names should be full resource names and should be of the format: "projects/{project}/locations/{location}/instances/{instance}/dataAccessScopes/{scope_name}".

func (ReferenceListScopeInfoReferenceListScopeOutput) ToReferenceListScopeInfoReferenceListScopeOutput added in v8.15.0 

func (o ReferenceListScopeInfoReferenceListScopeOutput) ToReferenceListScopeInfoReferenceListScopeOutput() ReferenceListScopeInfoReferenceListScopeOutput

func (ReferenceListScopeInfoReferenceListScopeOutput) ToReferenceListScopeInfoReferenceListScopeOutputWithContext added in v8.15.0 

func (o ReferenceListScopeInfoReferenceListScopeOutput) ToReferenceListScopeInfoReferenceListScopeOutputWithContext(ctx context.Context) ReferenceListScopeInfoReferenceListScopeOutput

type ReferenceListState added in v8.15.0 

type ReferenceListState struct {
	// Required. A user-provided description of the reference list.
	Description pulumi.StringPtrInput
	// Output only. The unique display name of the reference list.
	DisplayName pulumi.StringPtrInput
	// Required. The entries of the reference list.
	// When listed, they are returned in the order that was specified at creation
	// or update. The combined size of the values of the reference list may not
	// exceed 6MB.
	// This is returned only when the view is REFERENCE_LIST_VIEW_FULL.
	// Structure is documented below.
	Entries ReferenceListEntryArrayInput
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringPtrInput
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringPtrInput
	// Output only. The resource name of the reference list.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/referenceLists/{reference_list}
	Name    pulumi.StringPtrInput
	Project pulumi.StringPtrInput
	// Required. The ID to use for the reference list. This is also the display name for
	// the reference list. It must satisfy the following requirements:
	// - Starts with letter.
	// - Contains only letters, numbers and underscore.
	// - Has length < 256.
	// - Must be unique.
	ReferenceListId pulumi.StringPtrInput
	// Output only. The timestamp when the reference list was last updated.
	RevisionCreateTime pulumi.StringPtrInput
	// Output only. The count of self-authored rules using the reference list.
	RuleAssociationsCount pulumi.IntPtrInput
	// Output only. The resource names for the associated self-authored Rules that use this
	// reference list.
	// This is returned only when the view is REFERENCE_LIST_VIEW_FULL.
	Rules pulumi.StringArrayInput
	// ScopeInfo specifies the scope info of the reference list.
	// Structure is documented below.
	ScopeInfos ReferenceListScopeInfoArrayInput
	// Possible values:
	// REFERENCE_LIST_SYNTAX_TYPE_PLAIN_TEXT_STRING
	// REFERENCE_LIST_SYNTAX_TYPE_REGEX
	// REFERENCE_LIST_SYNTAX_TYPE_CIDR
	SyntaxType pulumi.StringPtrInput
}

func (ReferenceListState) ElementType added in v8.15.0 

func (ReferenceListState) ElementType() reflect.Type

type Rule added in v8.15.0 

type Rule struct {
	pulumi.CustomResourceState

	// Output only. The run frequencies that are allowed for the rule.
	// Populated in BASIC view and FULL view.
	AllowedRunFrequencies pulumi.StringArrayOutput `pulumi:"allowedRunFrequencies"`
	// Output only. The author of the rule. Extracted from the meta section of text.
	// Populated in BASIC view and FULL view.
	Author pulumi.StringOutput `pulumi:"author"`
	// Output only. A list of a rule's corresponding compilation diagnostic messages
	// such as compilation errors and compilation warnings.
	// Populated in FULL view.
	// Structure is documented below.
	CompilationDiagnostics RuleCompilationDiagnosticArrayOutput `pulumi:"compilationDiagnostics"`
	// Output only. The current compilation state of the rule.
	// Populated in FULL view.
	// Possible values:
	// COMPILATION_STATE_UNSPECIFIED
	// SUCCEEDED
	// FAILED
	CompilationState pulumi.StringOutput `pulumi:"compilationState"`
	// Output only. The timestamp of when the rule was created.
	// Populated in FULL view.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Output only. Resource names of the data tables used in this rule.
	DataTables pulumi.StringArrayOutput `pulumi:"dataTables"`
	// Policy to determine if the rule should be deleted forcefully.
	// If deletionPolicy = "FORCE", any retrohunts and any detections associated with the rule
	// will also be deleted. If deletionPolicy = "DEFAULT", the call will only succeed if the
	// rule has no associated retrohunts, including completed retrohunts, and no
	// associated detections. Regardless of this field's value, the rule
	// deployment associated with this rule will also be deleted.
	// Possible values: DEFAULT, FORCE
	DeletionPolicy pulumi.StringPtrOutput `pulumi:"deletionPolicy"`
	// The display name of the severity level. Extracted from the meta section of
	// the rule text.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// The etag for this rule.
	// If this is provided on update, the request will succeed if and only if it
	// matches the server-computed value, and will fail with an ABORTED error
	// otherwise.
	// Populated in BASIC view and FULL view.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	//
	// ***
	Instance pulumi.StringOutput `pulumi:"instance"`
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringOutput `pulumi:"location"`
	// Output only. Additional metadata specified in the meta section of text.
	// Populated in FULL view.
	Metadata pulumi.StringMapOutput `pulumi:"metadata"`
	// Full resource name for the rule. This unique identifier is generated using values provided for the URL parameters.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
	Name pulumi.StringOutput `pulumi:"name"`
	// Output only. Indicate the rule can run in near real time live rule.
	// If this is true, the rule uses the near real time live rule when the run
	// frequency is set to LIVE.
	NearRealTimeLiveRuleEligible pulumi.BoolOutput `pulumi:"nearRealTimeLiveRuleEligible"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
	// Output only. Resource names of the reference lists used in this rule.
	// Populated in FULL view.
	ReferenceLists pulumi.StringArrayOutput `pulumi:"referenceLists"`
	// Output only. The timestamp of when the rule revision was created.
	// Populated in FULL, REVISION_METADATA_ONLY views.
	RevisionCreateTime pulumi.StringOutput `pulumi:"revisionCreateTime"`
	// Output only. The revision ID of the rule.
	// A new revision is created whenever the rule text is changed in any way.
	// Format: v_{10 digits}_{9 digits}
	// Populated in REVISION_METADATA_ONLY view and FULL view.
	RevisionId pulumi.StringOutput `pulumi:"revisionId"`
	// Rule Id is the ID of the Rule.
	RuleId pulumi.StringOutput `pulumi:"ruleId"`
	// Resource name of the DataAccessScope bound to this rule.
	// Populated in BASIC view and FULL view.
	// If reference lists are used in the rule, validations will be performed
	// against this scope to ensure that the reference lists are compatible with
	// both the user's and the rule's scopes.
	// The scope should be in the format:
	// "projects/{project}/locations/{location}/instances/{instance}/dataAccessScopes/{scope}".
	Scope pulumi.StringPtrOutput `pulumi:"scope"`
	// (Output)
	// Output only. The severity of a rule's compilation diagnostic.
	// Possible values:
	// SEVERITY_UNSPECIFIED
	// WARNING
	// ERROR
	Severities RuleSeverityArrayOutput `pulumi:"severities"`
	// The YARA-L content of the rule.
	// Populated in FULL view.
	Text pulumi.StringPtrOutput `pulumi:"text"`
	// Possible values:
	// RULE_TYPE_UNSPECIFIED
	// SINGLE_EVENT
	// MULTI_EVENT
	Type pulumi.StringOutput `pulumi:"type"`
}

## Example Usage

### Chronicle Rule Basic

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewRule(ctx, "example", &chronicle.RuleArgs{
			Location:       pulumi.String("us"),
			Instance:       pulumi.String("00000000-0000-0000-0000-000000000000"),
			DeletionPolicy: pulumi.String("DEFAULT"),
			Text:           pulumi.String("rule test_rule { meta: events:  $userid = $e.principal.user.userid  match: $userid over 10m condition: $e }\n"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Chronicle Rule With Force Deletion

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewRule(ctx, "example", &chronicle.RuleArgs{
			Location:       pulumi.String("us"),
			Instance:       pulumi.String("00000000-0000-0000-0000-000000000000"),
			DeletionPolicy: pulumi.String("FORCE"),
			Text:           pulumi.String("rule test_rule { meta: events:  $userid = $e.principal.user.userid  match: $userid over 10m condition: $e }\n"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Chronicle Rule With Data Access Scope

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewDataAccessScope(ctx, "data_access_scope_test", &chronicle.DataAccessScopeArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			DataAccessScopeId: pulumi.String("scope-name"),
			Description:       pulumi.String("scope-description"),
			AllowedDataAccessLabels: chronicle.DataAccessScopeAllowedDataAccessLabelArray{
				&chronicle.DataAccessScopeAllowedDataAccessLabelArgs{
					LogType: pulumi.String("GCP_CLOUDAUDIT"),
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = chronicle.NewRule(ctx, "example", &chronicle.RuleArgs{
			Location: pulumi.String("us"),
			Instance: pulumi.String("00000000-0000-0000-0000-000000000000"),
			Scope:    pulumi.Any(googleChronicleDataAccessScope.DataAccessScopeTest.Name),
			Text:     pulumi.String("rule test_rule { meta: events:  $userid = $e.principal.user.userid  match: $userid over 10m condition: $e }\n"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Rule can be imported using any of these accepted formats:

* `projects/{{project}}/locations/{{location}}/instances/{{instance}}/rules/{{rule_id}}`

* `{{project}}/{{location}}/{{instance}}/{{rule_id}}`

* `{{location}}/{{instance}}/{{rule_id}}`

When using the `pulumi import` command, Rule can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:chronicle/rule:Rule default projects/{{project}}/locations/{{location}}/instances/{{instance}}/rules/{{rule_id}} ```

```sh $ pulumi import gcp:chronicle/rule:Rule default {{project}}/{{location}}/{{instance}}/{{rule_id}} ```

```sh $ pulumi import gcp:chronicle/rule:Rule default {{location}}/{{instance}}/{{rule_id}} ```

func GetRule added in v8.15.0 

func GetRule(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RuleState, opts ...pulumi.ResourceOption) (*Rule, error)

GetRule gets an existing Rule resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRule added in v8.15.0 

func NewRule(ctx *pulumi.Context,
	name string, args *RuleArgs, opts ...pulumi.ResourceOption) (*Rule, error)

NewRule registers a new resource with the given unique name, arguments, and options.

func (*Rule) ElementType added in v8.15.0 

func (*Rule) ElementType() reflect.Type

func (*Rule) ToRuleOutput added in v8.15.0 

func (i *Rule) ToRuleOutput() RuleOutput

func (*Rule) ToRuleOutputWithContext added in v8.15.0 

func (i *Rule) ToRuleOutputWithContext(ctx context.Context) RuleOutput

type RuleArgs added in v8.15.0 

type RuleArgs struct {
	// Policy to determine if the rule should be deleted forcefully.
	// If deletionPolicy = "FORCE", any retrohunts and any detections associated with the rule
	// will also be deleted. If deletionPolicy = "DEFAULT", the call will only succeed if the
	// rule has no associated retrohunts, including completed retrohunts, and no
	// associated detections. Regardless of this field's value, the rule
	// deployment associated with this rule will also be deleted.
	// Possible values: DEFAULT, FORCE
	DeletionPolicy pulumi.StringPtrInput
	// The etag for this rule.
	// If this is provided on update, the request will succeed if and only if it
	// matches the server-computed value, and will fail with an ABORTED error
	// otherwise.
	// Populated in BASIC view and FULL view.
	Etag pulumi.StringPtrInput
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	//
	// ***
	Instance pulumi.StringInput
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
	// Rule Id is the ID of the Rule.
	RuleId pulumi.StringPtrInput
	// Resource name of the DataAccessScope bound to this rule.
	// Populated in BASIC view and FULL view.
	// If reference lists are used in the rule, validations will be performed
	// against this scope to ensure that the reference lists are compatible with
	// both the user's and the rule's scopes.
	// The scope should be in the format:
	// "projects/{project}/locations/{location}/instances/{instance}/dataAccessScopes/{scope}".
	Scope pulumi.StringPtrInput
	// The YARA-L content of the rule.
	// Populated in FULL view.
	Text pulumi.StringPtrInput
}

The set of arguments for constructing a Rule resource.

func (RuleArgs) ElementType added in v8.15.0 

func (RuleArgs) ElementType() reflect.Type

type RuleArray added in v8.15.0 

type RuleArray []RuleInput

func (RuleArray) ElementType added in v8.15.0 

func (RuleArray) ElementType() reflect.Type

func (RuleArray) ToRuleArrayOutput added in v8.15.0 

func (i RuleArray) ToRuleArrayOutput() RuleArrayOutput

func (RuleArray) ToRuleArrayOutputWithContext added in v8.15.0 

func (i RuleArray) ToRuleArrayOutputWithContext(ctx context.Context) RuleArrayOutput

type RuleArrayInput added in v8.15.0 

type RuleArrayInput interface {
	pulumi.Input

	ToRuleArrayOutput() RuleArrayOutput
	ToRuleArrayOutputWithContext(context.Context) RuleArrayOutput
}

RuleArrayInput is an input type that accepts RuleArray and RuleArrayOutput values. You can construct a concrete instance of `RuleArrayInput` via: 

RuleArray{ RuleArgs{...} }

type RuleArrayOutput added in v8.15.0 

type RuleArrayOutput struct{ *pulumi.OutputState }

func (RuleArrayOutput) ElementType added in v8.15.0 

func (RuleArrayOutput) ElementType() reflect.Type

func (RuleArrayOutput) Index added in v8.15.0 

func (o RuleArrayOutput) Index(i pulumi.IntInput) RuleOutput

func (RuleArrayOutput) ToRuleArrayOutput added in v8.15.0 

func (o RuleArrayOutput) ToRuleArrayOutput() RuleArrayOutput

func (RuleArrayOutput) ToRuleArrayOutputWithContext added in v8.15.0 

func (o RuleArrayOutput) ToRuleArrayOutputWithContext(ctx context.Context) RuleArrayOutput

type RuleCompilationDiagnostic added in v8.15.0 

type RuleCompilationDiagnostic struct {
	// (Output)
	// Output only. The diagnostic message.
	Message *string `pulumi:"message"`
	// CompilationPosition represents the location of a compilation diagnostic in
	// rule text.
	// Structure is documented below.
	Position *RuleCompilationDiagnosticPosition `pulumi:"position"`
	// (Output)
	// Output only. The severity of a rule's compilation diagnostic.
	// Possible values:
	// SEVERITY_UNSPECIFIED
	// WARNING
	// ERROR
	Severity *string `pulumi:"severity"`
	// (Output)
	// Output only. Link to documentation that describes a diagnostic in more detail.
	Uri *string `pulumi:"uri"`
}

type RuleCompilationDiagnosticArgs added in v8.15.0 

type RuleCompilationDiagnosticArgs struct {
	// (Output)
	// Output only. The diagnostic message.
	Message pulumi.StringPtrInput `pulumi:"message"`
	// CompilationPosition represents the location of a compilation diagnostic in
	// rule text.
	// Structure is documented below.
	Position RuleCompilationDiagnosticPositionPtrInput `pulumi:"position"`
	// (Output)
	// Output only. The severity of a rule's compilation diagnostic.
	// Possible values:
	// SEVERITY_UNSPECIFIED
	// WARNING
	// ERROR
	Severity pulumi.StringPtrInput `pulumi:"severity"`
	// (Output)
	// Output only. Link to documentation that describes a diagnostic in more detail.
	Uri pulumi.StringPtrInput `pulumi:"uri"`
}

func (RuleCompilationDiagnosticArgs) ElementType added in v8.15.0 

func (RuleCompilationDiagnosticArgs) ElementType() reflect.Type

func (RuleCompilationDiagnosticArgs) ToRuleCompilationDiagnosticOutput added in v8.15.0 

func (i RuleCompilationDiagnosticArgs) ToRuleCompilationDiagnosticOutput() RuleCompilationDiagnosticOutput

func (RuleCompilationDiagnosticArgs) ToRuleCompilationDiagnosticOutputWithContext added in v8.15.0 

func (i RuleCompilationDiagnosticArgs) ToRuleCompilationDiagnosticOutputWithContext(ctx context.Context) RuleCompilationDiagnosticOutput

type RuleCompilationDiagnosticArray added in v8.15.0 

type RuleCompilationDiagnosticArray []RuleCompilationDiagnosticInput

func (RuleCompilationDiagnosticArray) ElementType added in v8.15.0 

func (RuleCompilationDiagnosticArray) ElementType() reflect.Type

func (RuleCompilationDiagnosticArray) ToRuleCompilationDiagnosticArrayOutput added in v8.15.0 

func (i RuleCompilationDiagnosticArray) ToRuleCompilationDiagnosticArrayOutput() RuleCompilationDiagnosticArrayOutput

func (RuleCompilationDiagnosticArray) ToRuleCompilationDiagnosticArrayOutputWithContext added in v8.15.0 

func (i RuleCompilationDiagnosticArray) ToRuleCompilationDiagnosticArrayOutputWithContext(ctx context.Context) RuleCompilationDiagnosticArrayOutput

type RuleCompilationDiagnosticArrayInput added in v8.15.0 

type RuleCompilationDiagnosticArrayInput interface {
	pulumi.Input

	ToRuleCompilationDiagnosticArrayOutput() RuleCompilationDiagnosticArrayOutput
	ToRuleCompilationDiagnosticArrayOutputWithContext(context.Context) RuleCompilationDiagnosticArrayOutput
}

RuleCompilationDiagnosticArrayInput is an input type that accepts RuleCompilationDiagnosticArray and RuleCompilationDiagnosticArrayOutput values. You can construct a concrete instance of `RuleCompilationDiagnosticArrayInput` via: 

RuleCompilationDiagnosticArray{ RuleCompilationDiagnosticArgs{...} }

type RuleCompilationDiagnosticArrayOutput added in v8.15.0 

type RuleCompilationDiagnosticArrayOutput struct{ *pulumi.OutputState }

func (RuleCompilationDiagnosticArrayOutput) ElementType added in v8.15.0 

func (RuleCompilationDiagnosticArrayOutput) ElementType() reflect.Type

func (RuleCompilationDiagnosticArrayOutput) Index added in v8.15.0 

func (o RuleCompilationDiagnosticArrayOutput) Index(i pulumi.IntInput) RuleCompilationDiagnosticOutput

func (RuleCompilationDiagnosticArrayOutput) ToRuleCompilationDiagnosticArrayOutput added in v8.15.0 

func (o RuleCompilationDiagnosticArrayOutput) ToRuleCompilationDiagnosticArrayOutput() RuleCompilationDiagnosticArrayOutput

func (RuleCompilationDiagnosticArrayOutput) ToRuleCompilationDiagnosticArrayOutputWithContext added in v8.15.0 

func (o RuleCompilationDiagnosticArrayOutput) ToRuleCompilationDiagnosticArrayOutputWithContext(ctx context.Context) RuleCompilationDiagnosticArrayOutput

type RuleCompilationDiagnosticInput added in v8.15.0 

type RuleCompilationDiagnosticInput interface {
	pulumi.Input

	ToRuleCompilationDiagnosticOutput() RuleCompilationDiagnosticOutput
	ToRuleCompilationDiagnosticOutputWithContext(context.Context) RuleCompilationDiagnosticOutput
}

RuleCompilationDiagnosticInput is an input type that accepts RuleCompilationDiagnosticArgs and RuleCompilationDiagnosticOutput values. You can construct a concrete instance of `RuleCompilationDiagnosticInput` via: 

RuleCompilationDiagnosticArgs{...}

type RuleCompilationDiagnosticOutput added in v8.15.0 

type RuleCompilationDiagnosticOutput struct{ *pulumi.OutputState }

func (RuleCompilationDiagnosticOutput) ElementType added in v8.15.0 

func (RuleCompilationDiagnosticOutput) ElementType() reflect.Type

func (RuleCompilationDiagnosticOutput) Message added in v8.15.0 

func (o RuleCompilationDiagnosticOutput) Message() pulumi.StringPtrOutput

(Output) Output only. The diagnostic message.

func (RuleCompilationDiagnosticOutput) Position added in v8.15.0 

func (o RuleCompilationDiagnosticOutput) Position() RuleCompilationDiagnosticPositionPtrOutput

CompilationPosition represents the location of a compilation diagnostic in rule text. Structure is documented below.

func (RuleCompilationDiagnosticOutput) Severity added in v8.15.0 

func (o RuleCompilationDiagnosticOutput) Severity() pulumi.StringPtrOutput

(Output) Output only. The severity of a rule's compilation diagnostic. Possible values: SEVERITY_UNSPECIFIED WARNING ERROR

func (RuleCompilationDiagnosticOutput) ToRuleCompilationDiagnosticOutput added in v8.15.0 

func (o RuleCompilationDiagnosticOutput) ToRuleCompilationDiagnosticOutput() RuleCompilationDiagnosticOutput

func (RuleCompilationDiagnosticOutput) ToRuleCompilationDiagnosticOutputWithContext added in v8.15.0 

func (o RuleCompilationDiagnosticOutput) ToRuleCompilationDiagnosticOutputWithContext(ctx context.Context) RuleCompilationDiagnosticOutput

func (RuleCompilationDiagnosticOutput) Uri added in v8.15.0 

func (o RuleCompilationDiagnosticOutput) Uri() pulumi.StringPtrOutput

(Output) Output only. Link to documentation that describes a diagnostic in more detail.

type RuleCompilationDiagnosticPosition added in v8.15.0 

type RuleCompilationDiagnosticPosition struct {
	// (Output)
	// Output only. End column number, beginning at 1.
	EndColumn *int `pulumi:"endColumn"`
	// (Output)
	// Output only. End line number, beginning at 1.
	EndLine *int `pulumi:"endLine"`
	// (Output)
	// Output only. Start column number, beginning at 1.
	StartColumn *int `pulumi:"startColumn"`
	// (Output)
	// Output only. Start line number, beginning at 1.
	StartLine *int `pulumi:"startLine"`
}

type RuleCompilationDiagnosticPositionArgs added in v8.15.0 

type RuleCompilationDiagnosticPositionArgs struct {
	// (Output)
	// Output only. End column number, beginning at 1.
	EndColumn pulumi.IntPtrInput `pulumi:"endColumn"`
	// (Output)
	// Output only. End line number, beginning at 1.
	EndLine pulumi.IntPtrInput `pulumi:"endLine"`
	// (Output)
	// Output only. Start column number, beginning at 1.
	StartColumn pulumi.IntPtrInput `pulumi:"startColumn"`
	// (Output)
	// Output only. Start line number, beginning at 1.
	StartLine pulumi.IntPtrInput `pulumi:"startLine"`
}

func (RuleCompilationDiagnosticPositionArgs) ElementType added in v8.15.0 

func (RuleCompilationDiagnosticPositionArgs) ElementType() reflect.Type

func (RuleCompilationDiagnosticPositionArgs) ToRuleCompilationDiagnosticPositionOutput added in v8.15.0 

func (i RuleCompilationDiagnosticPositionArgs) ToRuleCompilationDiagnosticPositionOutput() RuleCompilationDiagnosticPositionOutput

func (RuleCompilationDiagnosticPositionArgs) ToRuleCompilationDiagnosticPositionOutputWithContext added in v8.15.0 

func (i RuleCompilationDiagnosticPositionArgs) ToRuleCompilationDiagnosticPositionOutputWithContext(ctx context.Context) RuleCompilationDiagnosticPositionOutput

func (RuleCompilationDiagnosticPositionArgs) ToRuleCompilationDiagnosticPositionPtrOutput added in v8.15.0 

func (i RuleCompilationDiagnosticPositionArgs) ToRuleCompilationDiagnosticPositionPtrOutput() RuleCompilationDiagnosticPositionPtrOutput

func (RuleCompilationDiagnosticPositionArgs) ToRuleCompilationDiagnosticPositionPtrOutputWithContext added in v8.15.0 

func (i RuleCompilationDiagnosticPositionArgs) ToRuleCompilationDiagnosticPositionPtrOutputWithContext(ctx context.Context) RuleCompilationDiagnosticPositionPtrOutput

type RuleCompilationDiagnosticPositionInput added in v8.15.0 

type RuleCompilationDiagnosticPositionInput interface {
	pulumi.Input

	ToRuleCompilationDiagnosticPositionOutput() RuleCompilationDiagnosticPositionOutput
	ToRuleCompilationDiagnosticPositionOutputWithContext(context.Context) RuleCompilationDiagnosticPositionOutput
}

RuleCompilationDiagnosticPositionInput is an input type that accepts RuleCompilationDiagnosticPositionArgs and RuleCompilationDiagnosticPositionOutput values. You can construct a concrete instance of `RuleCompilationDiagnosticPositionInput` via: 

RuleCompilationDiagnosticPositionArgs{...}

type RuleCompilationDiagnosticPositionOutput added in v8.15.0 

type RuleCompilationDiagnosticPositionOutput struct{ *pulumi.OutputState }

func (RuleCompilationDiagnosticPositionOutput) ElementType added in v8.15.0 

func (RuleCompilationDiagnosticPositionOutput) ElementType() reflect.Type

func (RuleCompilationDiagnosticPositionOutput) EndColumn added in v8.15.0 

func (o RuleCompilationDiagnosticPositionOutput) EndColumn() pulumi.IntPtrOutput

(Output) Output only. End column number, beginning at 1.

func (RuleCompilationDiagnosticPositionOutput) EndLine added in v8.15.0 

func (o RuleCompilationDiagnosticPositionOutput) EndLine() pulumi.IntPtrOutput

(Output) Output only. End line number, beginning at 1.

func (RuleCompilationDiagnosticPositionOutput) StartColumn added in v8.15.0 

func (o RuleCompilationDiagnosticPositionOutput) StartColumn() pulumi.IntPtrOutput

(Output) Output only. Start column number, beginning at 1.

func (RuleCompilationDiagnosticPositionOutput) StartLine added in v8.15.0 

func (o RuleCompilationDiagnosticPositionOutput) StartLine() pulumi.IntPtrOutput

(Output) Output only. Start line number, beginning at 1.

func (RuleCompilationDiagnosticPositionOutput) ToRuleCompilationDiagnosticPositionOutput added in v8.15.0 

func (o RuleCompilationDiagnosticPositionOutput) ToRuleCompilationDiagnosticPositionOutput() RuleCompilationDiagnosticPositionOutput

func (RuleCompilationDiagnosticPositionOutput) ToRuleCompilationDiagnosticPositionOutputWithContext added in v8.15.0 

func (o RuleCompilationDiagnosticPositionOutput) ToRuleCompilationDiagnosticPositionOutputWithContext(ctx context.Context) RuleCompilationDiagnosticPositionOutput

func (RuleCompilationDiagnosticPositionOutput) ToRuleCompilationDiagnosticPositionPtrOutput added in v8.15.0 

func (o RuleCompilationDiagnosticPositionOutput) ToRuleCompilationDiagnosticPositionPtrOutput() RuleCompilationDiagnosticPositionPtrOutput

func (RuleCompilationDiagnosticPositionOutput) ToRuleCompilationDiagnosticPositionPtrOutputWithContext added in v8.15.0 

func (o RuleCompilationDiagnosticPositionOutput) ToRuleCompilationDiagnosticPositionPtrOutputWithContext(ctx context.Context) RuleCompilationDiagnosticPositionPtrOutput

type RuleCompilationDiagnosticPositionPtrInput added in v8.15.0 

type RuleCompilationDiagnosticPositionPtrInput interface {
	pulumi.Input

	ToRuleCompilationDiagnosticPositionPtrOutput() RuleCompilationDiagnosticPositionPtrOutput
	ToRuleCompilationDiagnosticPositionPtrOutputWithContext(context.Context) RuleCompilationDiagnosticPositionPtrOutput
}

RuleCompilationDiagnosticPositionPtrInput is an input type that accepts RuleCompilationDiagnosticPositionArgs, RuleCompilationDiagnosticPositionPtr and RuleCompilationDiagnosticPositionPtrOutput values. You can construct a concrete instance of `RuleCompilationDiagnosticPositionPtrInput` via: 

        RuleCompilationDiagnosticPositionArgs{...}

or:

        nil

func RuleCompilationDiagnosticPositionPtr added in v8.15.0 

func RuleCompilationDiagnosticPositionPtr(v *RuleCompilationDiagnosticPositionArgs) RuleCompilationDiagnosticPositionPtrInput

type RuleCompilationDiagnosticPositionPtrOutput added in v8.15.0 

type RuleCompilationDiagnosticPositionPtrOutput struct{ *pulumi.OutputState }

func (RuleCompilationDiagnosticPositionPtrOutput) Elem added in v8.15.0 

func (o RuleCompilationDiagnosticPositionPtrOutput) Elem() RuleCompilationDiagnosticPositionOutput

func (RuleCompilationDiagnosticPositionPtrOutput) ElementType added in v8.15.0 

func (RuleCompilationDiagnosticPositionPtrOutput) ElementType() reflect.Type

func (RuleCompilationDiagnosticPositionPtrOutput) EndColumn added in v8.15.0 

func (o RuleCompilationDiagnosticPositionPtrOutput) EndColumn() pulumi.IntPtrOutput

(Output) Output only. End column number, beginning at 1.

func (RuleCompilationDiagnosticPositionPtrOutput) EndLine added in v8.15.0 

func (o RuleCompilationDiagnosticPositionPtrOutput) EndLine() pulumi.IntPtrOutput

(Output) Output only. End line number, beginning at 1.

func (RuleCompilationDiagnosticPositionPtrOutput) StartColumn added in v8.15.0 

func (o RuleCompilationDiagnosticPositionPtrOutput) StartColumn() pulumi.IntPtrOutput

(Output) Output only. Start column number, beginning at 1.

func (RuleCompilationDiagnosticPositionPtrOutput) StartLine added in v8.15.0 

func (o RuleCompilationDiagnosticPositionPtrOutput) StartLine() pulumi.IntPtrOutput

(Output) Output only. Start line number, beginning at 1.

func (RuleCompilationDiagnosticPositionPtrOutput) ToRuleCompilationDiagnosticPositionPtrOutput added in v8.15.0 

func (o RuleCompilationDiagnosticPositionPtrOutput) ToRuleCompilationDiagnosticPositionPtrOutput() RuleCompilationDiagnosticPositionPtrOutput

func (RuleCompilationDiagnosticPositionPtrOutput) ToRuleCompilationDiagnosticPositionPtrOutputWithContext added in v8.15.0 

func (o RuleCompilationDiagnosticPositionPtrOutput) ToRuleCompilationDiagnosticPositionPtrOutputWithContext(ctx context.Context) RuleCompilationDiagnosticPositionPtrOutput

type RuleDeployment added in v8.15.0 

type RuleDeployment struct {
	pulumi.CustomResourceState

	// Whether detections resulting from this deployment should be considered
	// alerts.
	Alerting pulumi.BoolPtrOutput `pulumi:"alerting"`
	// Output only. The timestamp when the rule deployment archive state was last set to true. If the rule deployment's current archive state is not set to true, the field will be empty.
	ArchiveTime pulumi.StringOutput `pulumi:"archiveTime"`
	// The archive state of the rule deployment.
	// Cannot be set to true unless enabled is set to false.
	// If set to true, alerting will automatically be set to false.
	// If currently set to true, enabled, alerting, and runFrequency cannot be
	// updated.
	Archived pulumi.BoolPtrOutput `pulumi:"archived"`
	// Output only. The names of the associated/chained consumer rules. Rules are considered
	// consumers of this rule if their rule text explicitly filters on this rule's ruleid.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
	ConsumerRules pulumi.StringArrayOutput `pulumi:"consumerRules"`
	// Whether the rule is currently deployed continuously against incoming data.
	Enabled pulumi.BoolPtrOutput `pulumi:"enabled"`
	// The execution state of the rule deployment.
	// Possible values:
	// DEFAULT
	// LIMITED
	// PAUSED
	ExecutionState pulumi.StringOutput `pulumi:"executionState"`
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringOutput `pulumi:"instance"`
	// Output only. The timestamp when the rule deployment alert state was lastly changed. This is filled regardless of the current alert state.E.g. if the current alert status is false, this timestamp will be the timestamp when the alert status was changed to false.
	LastAlertStatusChangeTime pulumi.StringOutput `pulumi:"lastAlertStatusChangeTime"`
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringOutput `pulumi:"location"`
	// The resource name of the rule deployment.
	// Note that RuleDeployment is a child of the overall Rule, not any individual
	// revision, so the resource ID segment for the Rule resource must not
	// reference a specific revision.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/rules/{rule}/deployment
	Name pulumi.StringOutput `pulumi:"name"`
	// Output only. The names of the associated/chained producer rules. Rules are considered
	// producers for this rule if this rule explicitly filters on their ruleid.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
	ProducerRules pulumi.StringArrayOutput `pulumi:"producerRules"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
	// The Rule ID of the rule.
	//
	// ***
	Rule pulumi.StringOutput `pulumi:"rule"`
	// The run frequency of the rule deployment.
	// Possible values:
	// LIVE
	// HOURLY
	// DAILY
	RunFrequency pulumi.StringPtrOutput `pulumi:"runFrequency"`
}

## Example Usage

## Import

RuleDeployment can be imported using any of these accepted formats:

* `projects/{{project}}/locations/{{location}}/instances/{{instance}}/rules/{{rule}}/deployment`

* `{{project}}/{{location}}/{{instance}}/{{rule}}`

* `{{location}}/{{instance}}/{{rule}}`

When using the `pulumi import` command, RuleDeployment can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:chronicle/ruleDeployment:RuleDeployment default projects/{{project}}/locations/{{location}}/instances/{{instance}}/rules/{{rule}}/deployment ```

```sh $ pulumi import gcp:chronicle/ruleDeployment:RuleDeployment default {{project}}/{{location}}/{{instance}}/{{rule}} ```

```sh $ pulumi import gcp:chronicle/ruleDeployment:RuleDeployment default {{location}}/{{instance}}/{{rule}} ```

func GetRuleDeployment added in v8.15.0 

func GetRuleDeployment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *RuleDeploymentState, opts ...pulumi.ResourceOption) (*RuleDeployment, error)

GetRuleDeployment gets an existing RuleDeployment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewRuleDeployment added in v8.15.0 

func NewRuleDeployment(ctx *pulumi.Context,
	name string, args *RuleDeploymentArgs, opts ...pulumi.ResourceOption) (*RuleDeployment, error)

NewRuleDeployment registers a new resource with the given unique name, arguments, and options.

func (*RuleDeployment) ElementType added in v8.15.0 

func (*RuleDeployment) ElementType() reflect.Type

func (*RuleDeployment) ToRuleDeploymentOutput added in v8.15.0 

func (i *RuleDeployment) ToRuleDeploymentOutput() RuleDeploymentOutput

func (*RuleDeployment) ToRuleDeploymentOutputWithContext added in v8.15.0 

func (i *RuleDeployment) ToRuleDeploymentOutputWithContext(ctx context.Context) RuleDeploymentOutput

type RuleDeploymentArgs added in v8.15.0 

type RuleDeploymentArgs struct {
	// Whether detections resulting from this deployment should be considered
	// alerts.
	Alerting pulumi.BoolPtrInput
	// The archive state of the rule deployment.
	// Cannot be set to true unless enabled is set to false.
	// If set to true, alerting will automatically be set to false.
	// If currently set to true, enabled, alerting, and runFrequency cannot be
	// updated.
	Archived pulumi.BoolPtrInput
	// Whether the rule is currently deployed continuously against incoming data.
	Enabled pulumi.BoolPtrInput
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringInput
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
	// The Rule ID of the rule.
	//
	// ***
	Rule pulumi.StringInput
	// The run frequency of the rule deployment.
	// Possible values:
	// LIVE
	// HOURLY
	// DAILY
	RunFrequency pulumi.StringPtrInput
}

The set of arguments for constructing a RuleDeployment resource.

func (RuleDeploymentArgs) ElementType added in v8.15.0 

func (RuleDeploymentArgs) ElementType() reflect.Type

type RuleDeploymentArray added in v8.15.0 

type RuleDeploymentArray []RuleDeploymentInput

func (RuleDeploymentArray) ElementType added in v8.15.0 

func (RuleDeploymentArray) ElementType() reflect.Type

func (RuleDeploymentArray) ToRuleDeploymentArrayOutput added in v8.15.0 

func (i RuleDeploymentArray) ToRuleDeploymentArrayOutput() RuleDeploymentArrayOutput

func (RuleDeploymentArray) ToRuleDeploymentArrayOutputWithContext added in v8.15.0 

func (i RuleDeploymentArray) ToRuleDeploymentArrayOutputWithContext(ctx context.Context) RuleDeploymentArrayOutput

type RuleDeploymentArrayInput added in v8.15.0 

type RuleDeploymentArrayInput interface {
	pulumi.Input

	ToRuleDeploymentArrayOutput() RuleDeploymentArrayOutput
	ToRuleDeploymentArrayOutputWithContext(context.Context) RuleDeploymentArrayOutput
}

RuleDeploymentArrayInput is an input type that accepts RuleDeploymentArray and RuleDeploymentArrayOutput values. You can construct a concrete instance of `RuleDeploymentArrayInput` via: 

RuleDeploymentArray{ RuleDeploymentArgs{...} }

type RuleDeploymentArrayOutput added in v8.15.0 

type RuleDeploymentArrayOutput struct{ *pulumi.OutputState }

func (RuleDeploymentArrayOutput) ElementType added in v8.15.0 

func (RuleDeploymentArrayOutput) ElementType() reflect.Type

func (RuleDeploymentArrayOutput) Index added in v8.15.0 

func (o RuleDeploymentArrayOutput) Index(i pulumi.IntInput) RuleDeploymentOutput

func (RuleDeploymentArrayOutput) ToRuleDeploymentArrayOutput added in v8.15.0 

func (o RuleDeploymentArrayOutput) ToRuleDeploymentArrayOutput() RuleDeploymentArrayOutput

func (RuleDeploymentArrayOutput) ToRuleDeploymentArrayOutputWithContext added in v8.15.0 

func (o RuleDeploymentArrayOutput) ToRuleDeploymentArrayOutputWithContext(ctx context.Context) RuleDeploymentArrayOutput

type RuleDeploymentInput added in v8.15.0 

type RuleDeploymentInput interface {
	pulumi.Input

	ToRuleDeploymentOutput() RuleDeploymentOutput
	ToRuleDeploymentOutputWithContext(ctx context.Context) RuleDeploymentOutput
}

type RuleDeploymentMap added in v8.15.0 

type RuleDeploymentMap map[string]RuleDeploymentInput

func (RuleDeploymentMap) ElementType added in v8.15.0 

func (RuleDeploymentMap) ElementType() reflect.Type

func (RuleDeploymentMap) ToRuleDeploymentMapOutput added in v8.15.0 

func (i RuleDeploymentMap) ToRuleDeploymentMapOutput() RuleDeploymentMapOutput

func (RuleDeploymentMap) ToRuleDeploymentMapOutputWithContext added in v8.15.0 

func (i RuleDeploymentMap) ToRuleDeploymentMapOutputWithContext(ctx context.Context) RuleDeploymentMapOutput

type RuleDeploymentMapInput added in v8.15.0 

type RuleDeploymentMapInput interface {
	pulumi.Input

	ToRuleDeploymentMapOutput() RuleDeploymentMapOutput
	ToRuleDeploymentMapOutputWithContext(context.Context) RuleDeploymentMapOutput
}

RuleDeploymentMapInput is an input type that accepts RuleDeploymentMap and RuleDeploymentMapOutput values. You can construct a concrete instance of `RuleDeploymentMapInput` via: 

RuleDeploymentMap{ "key": RuleDeploymentArgs{...} }

type RuleDeploymentMapOutput added in v8.15.0 

type RuleDeploymentMapOutput struct{ *pulumi.OutputState }

func (RuleDeploymentMapOutput) ElementType added in v8.15.0 

func (RuleDeploymentMapOutput) ElementType() reflect.Type

func (RuleDeploymentMapOutput) MapIndex added in v8.15.0 

func (o RuleDeploymentMapOutput) MapIndex(k pulumi.StringInput) RuleDeploymentOutput

func (RuleDeploymentMapOutput) ToRuleDeploymentMapOutput added in v8.15.0 

func (o RuleDeploymentMapOutput) ToRuleDeploymentMapOutput() RuleDeploymentMapOutput

func (RuleDeploymentMapOutput) ToRuleDeploymentMapOutputWithContext added in v8.15.0 

func (o RuleDeploymentMapOutput) ToRuleDeploymentMapOutputWithContext(ctx context.Context) RuleDeploymentMapOutput

type RuleDeploymentOutput added in v8.15.0 

type RuleDeploymentOutput struct{ *pulumi.OutputState }

func (RuleDeploymentOutput) Alerting added in v8.15.0 

func (o RuleDeploymentOutput) Alerting() pulumi.BoolPtrOutput

Whether detections resulting from this deployment should be considered alerts.

func (RuleDeploymentOutput) ArchiveTime added in v8.15.0 

func (o RuleDeploymentOutput) ArchiveTime() pulumi.StringOutput

Output only. The timestamp when the rule deployment archive state was last set to true. If the rule deployment's current archive state is not set to true, the field will be empty.

func (RuleDeploymentOutput) Archived added in v8.15.0 

func (o RuleDeploymentOutput) Archived() pulumi.BoolPtrOutput

The archive state of the rule deployment. Cannot be set to true unless enabled is set to false. If set to true, alerting will automatically be set to false. If currently set to true, enabled, alerting, and runFrequency cannot be updated.

func (RuleDeploymentOutput) ConsumerRules added in v8.15.0 

func (o RuleDeploymentOutput) ConsumerRules() pulumi.StringArrayOutput

Output only. The names of the associated/chained consumer rules. Rules are considered consumers of this rule if their rule text explicitly filters on this rule's ruleid. Format: projects/{project}/locations/{location}/instances/{instance}/rules/{rule}

func (RuleDeploymentOutput) ElementType added in v8.15.0 

func (RuleDeploymentOutput) ElementType() reflect.Type

func (RuleDeploymentOutput) Enabled added in v8.15.0 

func (o RuleDeploymentOutput) Enabled() pulumi.BoolPtrOutput

Whether the rule is currently deployed continuously against incoming data.

func (RuleDeploymentOutput) ExecutionState added in v8.15.0 

func (o RuleDeploymentOutput) ExecutionState() pulumi.StringOutput

The execution state of the rule deployment. Possible values: DEFAULT LIMITED PAUSED

func (RuleDeploymentOutput) Instance added in v8.15.0 

func (o RuleDeploymentOutput) Instance() pulumi.StringOutput

The unique identifier for the Chronicle instance, which is the same as the customer ID.

func (RuleDeploymentOutput) LastAlertStatusChangeTime added in v8.15.0 

func (o RuleDeploymentOutput) LastAlertStatusChangeTime() pulumi.StringOutput

Output only. The timestamp when the rule deployment alert state was lastly changed. This is filled regardless of the current alert state.E.g. if the current alert status is false, this timestamp will be the timestamp when the alert status was changed to false.

func (RuleDeploymentOutput) Location added in v8.15.0 

func (o RuleDeploymentOutput) Location() pulumi.StringOutput

The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".

func (RuleDeploymentOutput) Name added in v8.15.0 

func (o RuleDeploymentOutput) Name() pulumi.StringOutput

The resource name of the rule deployment. Note that RuleDeployment is a child of the overall Rule, not any individual revision, so the resource ID segment for the Rule resource must not reference a specific revision. Format: projects/{project}/locations/{location}/instances/{instance}/rules/{rule}/deployment

func (RuleDeploymentOutput) ProducerRules added in v8.15.0 

func (o RuleDeploymentOutput) ProducerRules() pulumi.StringArrayOutput

Output only. The names of the associated/chained producer rules. Rules are considered producers for this rule if this rule explicitly filters on their ruleid. Format: projects/{project}/locations/{location}/instances/{instance}/rules/{rule}

func (RuleDeploymentOutput) Project added in v8.15.0 

func (o RuleDeploymentOutput) Project() pulumi.StringOutput

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

func (RuleDeploymentOutput) Rule added in v8.15.0 

func (o RuleDeploymentOutput) Rule() pulumi.StringOutput

The Rule ID of the rule.

***

func (RuleDeploymentOutput) RunFrequency added in v8.15.0 

func (o RuleDeploymentOutput) RunFrequency() pulumi.StringPtrOutput

The run frequency of the rule deployment. Possible values: LIVE HOURLY DAILY

func (RuleDeploymentOutput) ToRuleDeploymentOutput added in v8.15.0 

func (o RuleDeploymentOutput) ToRuleDeploymentOutput() RuleDeploymentOutput

func (RuleDeploymentOutput) ToRuleDeploymentOutputWithContext added in v8.15.0 

func (o RuleDeploymentOutput) ToRuleDeploymentOutputWithContext(ctx context.Context) RuleDeploymentOutput

type RuleDeploymentState added in v8.15.0 

type RuleDeploymentState struct {
	// Whether detections resulting from this deployment should be considered
	// alerts.
	Alerting pulumi.BoolPtrInput
	// Output only. The timestamp when the rule deployment archive state was last set to true. If the rule deployment's current archive state is not set to true, the field will be empty.
	ArchiveTime pulumi.StringPtrInput
	// The archive state of the rule deployment.
	// Cannot be set to true unless enabled is set to false.
	// If set to true, alerting will automatically be set to false.
	// If currently set to true, enabled, alerting, and runFrequency cannot be
	// updated.
	Archived pulumi.BoolPtrInput
	// Output only. The names of the associated/chained consumer rules. Rules are considered
	// consumers of this rule if their rule text explicitly filters on this rule's ruleid.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
	ConsumerRules pulumi.StringArrayInput
	// Whether the rule is currently deployed continuously against incoming data.
	Enabled pulumi.BoolPtrInput
	// The execution state of the rule deployment.
	// Possible values:
	// DEFAULT
	// LIMITED
	// PAUSED
	ExecutionState pulumi.StringPtrInput
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringPtrInput
	// Output only. The timestamp when the rule deployment alert state was lastly changed. This is filled regardless of the current alert state.E.g. if the current alert status is false, this timestamp will be the timestamp when the alert status was changed to false.
	LastAlertStatusChangeTime pulumi.StringPtrInput
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringPtrInput
	// The resource name of the rule deployment.
	// Note that RuleDeployment is a child of the overall Rule, not any individual
	// revision, so the resource ID segment for the Rule resource must not
	// reference a specific revision.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/rules/{rule}/deployment
	Name pulumi.StringPtrInput
	// Output only. The names of the associated/chained producer rules. Rules are considered
	// producers for this rule if this rule explicitly filters on their ruleid.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
	ProducerRules pulumi.StringArrayInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
	// The Rule ID of the rule.
	//
	// ***
	Rule pulumi.StringPtrInput
	// The run frequency of the rule deployment.
	// Possible values:
	// LIVE
	// HOURLY
	// DAILY
	RunFrequency pulumi.StringPtrInput
}

func (RuleDeploymentState) ElementType added in v8.15.0 

func (RuleDeploymentState) ElementType() reflect.Type

type RuleInput added in v8.15.0 

type RuleInput interface {
	pulumi.Input

	ToRuleOutput() RuleOutput
	ToRuleOutputWithContext(ctx context.Context) RuleOutput
}

type RuleMap added in v8.15.0 

type RuleMap map[string]RuleInput

func (RuleMap) ElementType added in v8.15.0 

func (RuleMap) ElementType() reflect.Type

func (RuleMap) ToRuleMapOutput added in v8.15.0 

func (i RuleMap) ToRuleMapOutput() RuleMapOutput

func (RuleMap) ToRuleMapOutputWithContext added in v8.15.0 

func (i RuleMap) ToRuleMapOutputWithContext(ctx context.Context) RuleMapOutput

type RuleMapInput added in v8.15.0 

type RuleMapInput interface {
	pulumi.Input

	ToRuleMapOutput() RuleMapOutput
	ToRuleMapOutputWithContext(context.Context) RuleMapOutput
}

RuleMapInput is an input type that accepts RuleMap and RuleMapOutput values. You can construct a concrete instance of `RuleMapInput` via: 

RuleMap{ "key": RuleArgs{...} }

type RuleMapOutput added in v8.15.0 

type RuleMapOutput struct{ *pulumi.OutputState }

func (RuleMapOutput) ElementType added in v8.15.0 

func (RuleMapOutput) ElementType() reflect.Type

func (RuleMapOutput) MapIndex added in v8.15.0 

func (o RuleMapOutput) MapIndex(k pulumi.StringInput) RuleOutput

func (RuleMapOutput) ToRuleMapOutput added in v8.15.0 

func (o RuleMapOutput) ToRuleMapOutput() RuleMapOutput

func (RuleMapOutput) ToRuleMapOutputWithContext added in v8.15.0 

func (o RuleMapOutput) ToRuleMapOutputWithContext(ctx context.Context) RuleMapOutput

type RuleOutput added in v8.15.0 

type RuleOutput struct{ *pulumi.OutputState }

func (RuleOutput) AllowedRunFrequencies added in v8.15.0 

func (o RuleOutput) AllowedRunFrequencies() pulumi.StringArrayOutput

Output only. The run frequencies that are allowed for the rule. Populated in BASIC view and FULL view.

func (RuleOutput) Author added in v8.15.0 

func (o RuleOutput) Author() pulumi.StringOutput

Output only. The author of the rule. Extracted from the meta section of text. Populated in BASIC view and FULL view.

func (RuleOutput) CompilationDiagnostics added in v8.15.0 

func (o RuleOutput) CompilationDiagnostics() RuleCompilationDiagnosticArrayOutput

Output only. A list of a rule's corresponding compilation diagnostic messages such as compilation errors and compilation warnings. Populated in FULL view. Structure is documented below.

func (RuleOutput) CompilationState added in v8.15.0 

func (o RuleOutput) CompilationState() pulumi.StringOutput

Output only. The current compilation state of the rule. Populated in FULL view. Possible values: COMPILATION_STATE_UNSPECIFIED SUCCEEDED FAILED

func (RuleOutput) CreateTime added in v8.15.0 

func (o RuleOutput) CreateTime() pulumi.StringOutput

Output only. The timestamp of when the rule was created. Populated in FULL view.

func (RuleOutput) DataTables added in v8.15.0 

func (o RuleOutput) DataTables() pulumi.StringArrayOutput

Output only. Resource names of the data tables used in this rule.

func (RuleOutput) DeletionPolicy added in v8.15.0 

func (o RuleOutput) DeletionPolicy() pulumi.StringPtrOutput

Policy to determine if the rule should be deleted forcefully. If deletionPolicy = "FORCE", any retrohunts and any detections associated with the rule will also be deleted. If deletionPolicy = "DEFAULT", the call will only succeed if the rule has no associated retrohunts, including completed retrohunts, and no associated detections. Regardless of this field's value, the rule deployment associated with this rule will also be deleted. Possible values: DEFAULT, FORCE

func (RuleOutput) DisplayName added in v8.15.0 

func (o RuleOutput) DisplayName() pulumi.StringOutput

The display name of the severity level. Extracted from the meta section of the rule text.

func (RuleOutput) ElementType added in v8.15.0 

func (RuleOutput) ElementType() reflect.Type

func (RuleOutput) Etag added in v8.15.0 

func (o RuleOutput) Etag() pulumi.StringOutput

The etag for this rule. If this is provided on update, the request will succeed if and only if it matches the server-computed value, and will fail with an ABORTED error otherwise. Populated in BASIC view and FULL view.

func (RuleOutput) Instance added in v8.15.0 

func (o RuleOutput) Instance() pulumi.StringOutput

The unique identifier for the Chronicle instance, which is the same as the customer ID.

***

func (RuleOutput) Location added in v8.15.0 

func (o RuleOutput) Location() pulumi.StringOutput

The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".

func (RuleOutput) Metadata added in v8.15.0 

func (o RuleOutput) Metadata() pulumi.StringMapOutput

Output only. Additional metadata specified in the meta section of text. Populated in FULL view.

func (RuleOutput) Name added in v8.15.0 

func (o RuleOutput) Name() pulumi.StringOutput

Full resource name for the rule. This unique identifier is generated using values provided for the URL parameters. Format: projects/{project}/locations/{location}/instances/{instance}/rules/{rule}

func (RuleOutput) NearRealTimeLiveRuleEligible added in v8.15.0 

func (o RuleOutput) NearRealTimeLiveRuleEligible() pulumi.BoolOutput

Output only. Indicate the rule can run in near real time live rule. If this is true, the rule uses the near real time live rule when the run frequency is set to LIVE.

func (RuleOutput) Project added in v8.15.0 

func (o RuleOutput) Project() pulumi.StringOutput

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

func (RuleOutput) ReferenceLists added in v8.15.0 

func (o RuleOutput) ReferenceLists() pulumi.StringArrayOutput

Output only. Resource names of the reference lists used in this rule. Populated in FULL view.

func (RuleOutput) RevisionCreateTime added in v8.15.0 

func (o RuleOutput) RevisionCreateTime() pulumi.StringOutput

Output only. The timestamp of when the rule revision was created. Populated in FULL, REVISION_METADATA_ONLY views.

func (RuleOutput) RevisionId added in v8.15.0 

func (o RuleOutput) RevisionId() pulumi.StringOutput

Output only. The revision ID of the rule. A new revision is created whenever the rule text is changed in any way. Format: v_{10 digits}_{9 digits} Populated in REVISION_METADATA_ONLY view and FULL view.

func (RuleOutput) RuleId added in v8.15.0 

func (o RuleOutput) RuleId() pulumi.StringOutput

Rule Id is the ID of the Rule.

func (RuleOutput) Scope added in v8.15.0 

func (o RuleOutput) Scope() pulumi.StringPtrOutput

Resource name of the DataAccessScope bound to this rule. Populated in BASIC view and FULL view. If reference lists are used in the rule, validations will be performed against this scope to ensure that the reference lists are compatible with both the user's and the rule's scopes. The scope should be in the format: "projects/{project}/locations/{location}/instances/{instance}/dataAccessScopes/{scope}".

func (RuleOutput) Severities added in v8.15.0 

func (o RuleOutput) Severities() RuleSeverityArrayOutput

(Output) Output only. The severity of a rule's compilation diagnostic. Possible values: SEVERITY_UNSPECIFIED WARNING ERROR

func (RuleOutput) Text added in v8.15.0 

func (o RuleOutput) Text() pulumi.StringPtrOutput

The YARA-L content of the rule. Populated in FULL view.

func (RuleOutput) ToRuleOutput added in v8.15.0 

func (o RuleOutput) ToRuleOutput() RuleOutput

func (RuleOutput) ToRuleOutputWithContext added in v8.15.0 

func (o RuleOutput) ToRuleOutputWithContext(ctx context.Context) RuleOutput

func (RuleOutput) Type added in v8.15.0 

func (o RuleOutput) Type() pulumi.StringOutput

Possible values: RULE_TYPE_UNSPECIFIED SINGLE_EVENT MULTI_EVENT

type RuleSeverity added in v8.15.0 

type RuleSeverity struct {
	// The display name of the severity level. Extracted from the meta section of
	// the rule text.
	DisplayName *string `pulumi:"displayName"`
}

type RuleSeverityArgs added in v8.15.0 

type RuleSeverityArgs struct {
	// The display name of the severity level. Extracted from the meta section of
	// the rule text.
	DisplayName pulumi.StringPtrInput `pulumi:"displayName"`
}

func (RuleSeverityArgs) ElementType added in v8.15.0 

func (RuleSeverityArgs) ElementType() reflect.Type

func (RuleSeverityArgs) ToRuleSeverityOutput added in v8.15.0 

func (i RuleSeverityArgs) ToRuleSeverityOutput() RuleSeverityOutput

func (RuleSeverityArgs) ToRuleSeverityOutputWithContext added in v8.15.0 

func (i RuleSeverityArgs) ToRuleSeverityOutputWithContext(ctx context.Context) RuleSeverityOutput

type RuleSeverityArray added in v8.15.0 

type RuleSeverityArray []RuleSeverityInput

func (RuleSeverityArray) ElementType added in v8.15.0 

func (RuleSeverityArray) ElementType() reflect.Type

func (RuleSeverityArray) ToRuleSeverityArrayOutput added in v8.15.0 

func (i RuleSeverityArray) ToRuleSeverityArrayOutput() RuleSeverityArrayOutput

func (RuleSeverityArray) ToRuleSeverityArrayOutputWithContext added in v8.15.0 

func (i RuleSeverityArray) ToRuleSeverityArrayOutputWithContext(ctx context.Context) RuleSeverityArrayOutput

type RuleSeverityArrayInput added in v8.15.0 

type RuleSeverityArrayInput interface {
	pulumi.Input

	ToRuleSeverityArrayOutput() RuleSeverityArrayOutput
	ToRuleSeverityArrayOutputWithContext(context.Context) RuleSeverityArrayOutput
}

RuleSeverityArrayInput is an input type that accepts RuleSeverityArray and RuleSeverityArrayOutput values. You can construct a concrete instance of `RuleSeverityArrayInput` via: 

RuleSeverityArray{ RuleSeverityArgs{...} }

type RuleSeverityArrayOutput added in v8.15.0 

type RuleSeverityArrayOutput struct{ *pulumi.OutputState }

func (RuleSeverityArrayOutput) ElementType added in v8.15.0 

func (RuleSeverityArrayOutput) ElementType() reflect.Type

func (RuleSeverityArrayOutput) Index added in v8.15.0 

func (o RuleSeverityArrayOutput) Index(i pulumi.IntInput) RuleSeverityOutput

func (RuleSeverityArrayOutput) ToRuleSeverityArrayOutput added in v8.15.0 

func (o RuleSeverityArrayOutput) ToRuleSeverityArrayOutput() RuleSeverityArrayOutput

func (RuleSeverityArrayOutput) ToRuleSeverityArrayOutputWithContext added in v8.15.0 

func (o RuleSeverityArrayOutput) ToRuleSeverityArrayOutputWithContext(ctx context.Context) RuleSeverityArrayOutput

type RuleSeverityInput added in v8.15.0 

type RuleSeverityInput interface {
	pulumi.Input

	ToRuleSeverityOutput() RuleSeverityOutput
	ToRuleSeverityOutputWithContext(context.Context) RuleSeverityOutput
}

RuleSeverityInput is an input type that accepts RuleSeverityArgs and RuleSeverityOutput values. You can construct a concrete instance of `RuleSeverityInput` via: 

RuleSeverityArgs{...}

type RuleSeverityOutput added in v8.15.0 

type RuleSeverityOutput struct{ *pulumi.OutputState }

func (RuleSeverityOutput) DisplayName added in v8.15.0 

func (o RuleSeverityOutput) DisplayName() pulumi.StringPtrOutput

The display name of the severity level. Extracted from the meta section of the rule text.

func (RuleSeverityOutput) ElementType added in v8.15.0 

func (RuleSeverityOutput) ElementType() reflect.Type

func (RuleSeverityOutput) ToRuleSeverityOutput added in v8.15.0 

func (o RuleSeverityOutput) ToRuleSeverityOutput() RuleSeverityOutput

func (RuleSeverityOutput) ToRuleSeverityOutputWithContext added in v8.15.0 

func (o RuleSeverityOutput) ToRuleSeverityOutputWithContext(ctx context.Context) RuleSeverityOutput

type RuleState added in v8.15.0 

type RuleState struct {
	// Output only. The run frequencies that are allowed for the rule.
	// Populated in BASIC view and FULL view.
	AllowedRunFrequencies pulumi.StringArrayInput
	// Output only. The author of the rule. Extracted from the meta section of text.
	// Populated in BASIC view and FULL view.
	Author pulumi.StringPtrInput
	// Output only. A list of a rule's corresponding compilation diagnostic messages
	// such as compilation errors and compilation warnings.
	// Populated in FULL view.
	// Structure is documented below.
	CompilationDiagnostics RuleCompilationDiagnosticArrayInput
	// Output only. The current compilation state of the rule.
	// Populated in FULL view.
	// Possible values:
	// COMPILATION_STATE_UNSPECIFIED
	// SUCCEEDED
	// FAILED
	CompilationState pulumi.StringPtrInput
	// Output only. The timestamp of when the rule was created.
	// Populated in FULL view.
	CreateTime pulumi.StringPtrInput
	// Output only. Resource names of the data tables used in this rule.
	DataTables pulumi.StringArrayInput
	// Policy to determine if the rule should be deleted forcefully.
	// If deletionPolicy = "FORCE", any retrohunts and any detections associated with the rule
	// will also be deleted. If deletionPolicy = "DEFAULT", the call will only succeed if the
	// rule has no associated retrohunts, including completed retrohunts, and no
	// associated detections. Regardless of this field's value, the rule
	// deployment associated with this rule will also be deleted.
	// Possible values: DEFAULT, FORCE
	DeletionPolicy pulumi.StringPtrInput
	// The display name of the severity level. Extracted from the meta section of
	// the rule text.
	DisplayName pulumi.StringPtrInput
	// The etag for this rule.
	// If this is provided on update, the request will succeed if and only if it
	// matches the server-computed value, and will fail with an ABORTED error
	// otherwise.
	// Populated in BASIC view and FULL view.
	Etag pulumi.StringPtrInput
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	//
	// ***
	Instance pulumi.StringPtrInput
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringPtrInput
	// Output only. Additional metadata specified in the meta section of text.
	// Populated in FULL view.
	Metadata pulumi.StringMapInput
	// Full resource name for the rule. This unique identifier is generated using values provided for the URL parameters.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
	Name pulumi.StringPtrInput
	// Output only. Indicate the rule can run in near real time live rule.
	// If this is true, the rule uses the near real time live rule when the run
	// frequency is set to LIVE.
	NearRealTimeLiveRuleEligible pulumi.BoolPtrInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
	// Output only. Resource names of the reference lists used in this rule.
	// Populated in FULL view.
	ReferenceLists pulumi.StringArrayInput
	// Output only. The timestamp of when the rule revision was created.
	// Populated in FULL, REVISION_METADATA_ONLY views.
	RevisionCreateTime pulumi.StringPtrInput
	// Output only. The revision ID of the rule.
	// A new revision is created whenever the rule text is changed in any way.
	// Format: v_{10 digits}_{9 digits}
	// Populated in REVISION_METADATA_ONLY view and FULL view.
	RevisionId pulumi.StringPtrInput
	// Rule Id is the ID of the Rule.
	RuleId pulumi.StringPtrInput
	// Resource name of the DataAccessScope bound to this rule.
	// Populated in BASIC view and FULL view.
	// If reference lists are used in the rule, validations will be performed
	// against this scope to ensure that the reference lists are compatible with
	// both the user's and the rule's scopes.
	// The scope should be in the format:
	// "projects/{project}/locations/{location}/instances/{instance}/dataAccessScopes/{scope}".
	Scope pulumi.StringPtrInput
	// (Output)
	// Output only. The severity of a rule's compilation diagnostic.
	// Possible values:
	// SEVERITY_UNSPECIFIED
	// WARNING
	// ERROR
	Severities RuleSeverityArrayInput
	// The YARA-L content of the rule.
	// Populated in FULL view.
	Text pulumi.StringPtrInput
	// Possible values:
	// RULE_TYPE_UNSPECIFIED
	// SINGLE_EVENT
	// MULTI_EVENT
	Type pulumi.StringPtrInput
}

func (RuleState) ElementType added in v8.15.0 

func (RuleState) ElementType() reflect.Type

type Watchlist 

type Watchlist struct {
	pulumi.CustomResourceState

	// Output only. Time the watchlist was created.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Optional. Description of the watchlist.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Required. Display name of the watchlist.
	// Note that it must be at least one character and less than 63 characters
	// (https://google.aip.dev/148).
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// Count of different types of entities in the watchlist.
	// Structure is documented below.
	EntityCounts WatchlistEntityCountArrayOutput `pulumi:"entityCounts"`
	// Mechanism to populate entities in the watchlist.
	// Structure is documented below.
	EntityPopulationMechanism WatchlistEntityPopulationMechanismOutput `pulumi:"entityPopulationMechanism"`
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringOutput `pulumi:"instance"`
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringOutput `pulumi:"location"`
	// Optional. Weight applied to the risk score for entities in this watchlist. The default is 1.0 if it is not specified.
	MultiplyingFactor pulumi.Float64PtrOutput `pulumi:"multiplyingFactor"`
	// Identifier. Resource name of the watchlist. This unique identifier is generated using values provided for the URL parameters.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/watchlists/{watchlist}
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// Output only. Time the watchlist was last updated.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
	// Optional. The ID to use for the watchlist, which will become the final component of the watchlist's resource name. This
	// value should be 4-63 characters, and valid characters are /a-z-/.
	WatchlistId pulumi.StringOutput `pulumi:"watchlistId"`
	// A collection of user preferences for watchlist UI configuration.
	WatchlistUserPreferences WatchlistWatchlistUserPreferencesOutput `pulumi:"watchlistUserPreferences"`
}

## Example Usage

### Chronicle Watchlist Basic

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewWatchlist(ctx, "example", &chronicle.WatchlistArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			WatchlistId:       pulumi.String("watchlist-id"),
			Description:       pulumi.String("watchlist-description"),
			DisplayName:       pulumi.String("watchlist_name"),
			MultiplyingFactor: pulumi.Float64(1),
			EntityPopulationMechanism: &chronicle.WatchlistEntityPopulationMechanismArgs{
				Manual: &chronicle.WatchlistEntityPopulationMechanismManualArgs{},
			},
			WatchlistUserPreferences: &chronicle.WatchlistWatchlistUserPreferencesArgs{
				Pinned: pulumi.Bool(true),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Chronicle Watchlist Without Id

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/chronicle"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewWatchlist(ctx, "example", &chronicle.WatchlistArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			Description:       pulumi.String("watchlist-description"),
			DisplayName:       pulumi.String("watchlist-name"),
			MultiplyingFactor: pulumi.Float64(1),
			EntityPopulationMechanism: &chronicle.WatchlistEntityPopulationMechanismArgs{
				Manual: &chronicle.WatchlistEntityPopulationMechanismManualArgs{},
			},
			WatchlistUserPreferences: &chronicle.WatchlistWatchlistUserPreferencesArgs{
				Pinned: pulumi.Bool(true),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Watchlist can be imported using any of these accepted formats:

* `projects/{{project}}/locations/{{location}}/instances/{{instance}}/watchlists/{{watchlist_id}}`

* `{{project}}/{{location}}/{{instance}}/{{watchlist_id}}`

* `{{location}}/{{instance}}/{{watchlist_id}}`

When using the `pulumi import` command, Watchlist can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:chronicle/watchlist:Watchlist default projects/{{project}}/locations/{{location}}/instances/{{instance}}/watchlists/{{watchlist_id}} ```

```sh $ pulumi import gcp:chronicle/watchlist:Watchlist default {{project}}/{{location}}/{{instance}}/{{watchlist_id}} ```

```sh $ pulumi import gcp:chronicle/watchlist:Watchlist default {{location}}/{{instance}}/{{watchlist_id}} ```

func GetWatchlist 

func GetWatchlist(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *WatchlistState, opts ...pulumi.ResourceOption) (*Watchlist, error)

GetWatchlist gets an existing Watchlist resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewWatchlist 

func NewWatchlist(ctx *pulumi.Context,
	name string, args *WatchlistArgs, opts ...pulumi.ResourceOption) (*Watchlist, error)

NewWatchlist registers a new resource with the given unique name, arguments, and options.

func (*Watchlist) ElementType 

func (*Watchlist) ElementType() reflect.Type

func (*Watchlist) ToWatchlistOutput 

func (i *Watchlist) ToWatchlistOutput() WatchlistOutput

func (*Watchlist) ToWatchlistOutputWithContext 

func (i *Watchlist) ToWatchlistOutputWithContext(ctx context.Context) WatchlistOutput

type WatchlistArgs 

type WatchlistArgs struct {
	// Optional. Description of the watchlist.
	Description pulumi.StringPtrInput
	// Required. Display name of the watchlist.
	// Note that it must be at least one character and less than 63 characters
	// (https://google.aip.dev/148).
	DisplayName pulumi.StringInput
	// Mechanism to populate entities in the watchlist.
	// Structure is documented below.
	EntityPopulationMechanism WatchlistEntityPopulationMechanismInput
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringInput
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringInput
	// Optional. Weight applied to the risk score for entities in this watchlist. The default is 1.0 if it is not specified.
	MultiplyingFactor pulumi.Float64PtrInput
	Project           pulumi.StringPtrInput
	// Optional. The ID to use for the watchlist, which will become the final component of the watchlist's resource name. This
	// value should be 4-63 characters, and valid characters are /a-z-/.
	WatchlistId pulumi.StringPtrInput
	// A collection of user preferences for watchlist UI configuration.
	WatchlistUserPreferences WatchlistWatchlistUserPreferencesPtrInput
}

The set of arguments for constructing a Watchlist resource.

func (WatchlistArgs) ElementType 

func (WatchlistArgs) ElementType() reflect.Type

type WatchlistArray 

type WatchlistArray []WatchlistInput

func (WatchlistArray) ElementType 

func (WatchlistArray) ElementType() reflect.Type

func (WatchlistArray) ToWatchlistArrayOutput 

func (i WatchlistArray) ToWatchlistArrayOutput() WatchlistArrayOutput

func (WatchlistArray) ToWatchlistArrayOutputWithContext 

func (i WatchlistArray) ToWatchlistArrayOutputWithContext(ctx context.Context) WatchlistArrayOutput

type WatchlistArrayInput 

type WatchlistArrayInput interface {
	pulumi.Input

	ToWatchlistArrayOutput() WatchlistArrayOutput
	ToWatchlistArrayOutputWithContext(context.Context) WatchlistArrayOutput
}

WatchlistArrayInput is an input type that accepts WatchlistArray and WatchlistArrayOutput values. You can construct a concrete instance of `WatchlistArrayInput` via: 

WatchlistArray{ WatchlistArgs{...} }

type WatchlistArrayOutput 

type WatchlistArrayOutput struct{ *pulumi.OutputState }

func (WatchlistArrayOutput) ElementType 

func (WatchlistArrayOutput) ElementType() reflect.Type

func (WatchlistArrayOutput) Index 

func (o WatchlistArrayOutput) Index(i pulumi.IntInput) WatchlistOutput

func (WatchlistArrayOutput) ToWatchlistArrayOutput 

func (o WatchlistArrayOutput) ToWatchlistArrayOutput() WatchlistArrayOutput

func (WatchlistArrayOutput) ToWatchlistArrayOutputWithContext 

func (o WatchlistArrayOutput) ToWatchlistArrayOutputWithContext(ctx context.Context) WatchlistArrayOutput

type WatchlistEntityCount 

type WatchlistEntityCount struct {
	// (Output)
	// Output only. Count of asset type entities in the watchlist.
	Asset *int `pulumi:"asset"`
	// (Output)
	// Output only. Count of user type entities in the watchlist.
	User *int `pulumi:"user"`
}

type WatchlistEntityCountArgs 

type WatchlistEntityCountArgs struct {
	// (Output)
	// Output only. Count of asset type entities in the watchlist.
	Asset pulumi.IntPtrInput `pulumi:"asset"`
	// (Output)
	// Output only. Count of user type entities in the watchlist.
	User pulumi.IntPtrInput `pulumi:"user"`
}

func (WatchlistEntityCountArgs) ElementType 

func (WatchlistEntityCountArgs) ElementType() reflect.Type

func (WatchlistEntityCountArgs) ToWatchlistEntityCountOutput 

func (i WatchlistEntityCountArgs) ToWatchlistEntityCountOutput() WatchlistEntityCountOutput

func (WatchlistEntityCountArgs) ToWatchlistEntityCountOutputWithContext 

func (i WatchlistEntityCountArgs) ToWatchlistEntityCountOutputWithContext(ctx context.Context) WatchlistEntityCountOutput

type WatchlistEntityCountArray 

type WatchlistEntityCountArray []WatchlistEntityCountInput

func (WatchlistEntityCountArray) ElementType 

func (WatchlistEntityCountArray) ElementType() reflect.Type

func (WatchlistEntityCountArray) ToWatchlistEntityCountArrayOutput 

func (i WatchlistEntityCountArray) ToWatchlistEntityCountArrayOutput() WatchlistEntityCountArrayOutput

func (WatchlistEntityCountArray) ToWatchlistEntityCountArrayOutputWithContext 

func (i WatchlistEntityCountArray) ToWatchlistEntityCountArrayOutputWithContext(ctx context.Context) WatchlistEntityCountArrayOutput

type WatchlistEntityCountArrayInput 

type WatchlistEntityCountArrayInput interface {
	pulumi.Input

	ToWatchlistEntityCountArrayOutput() WatchlistEntityCountArrayOutput
	ToWatchlistEntityCountArrayOutputWithContext(context.Context) WatchlistEntityCountArrayOutput
}

WatchlistEntityCountArrayInput is an input type that accepts WatchlistEntityCountArray and WatchlistEntityCountArrayOutput values. You can construct a concrete instance of `WatchlistEntityCountArrayInput` via: 

WatchlistEntityCountArray{ WatchlistEntityCountArgs{...} }

type WatchlistEntityCountArrayOutput 

type WatchlistEntityCountArrayOutput struct{ *pulumi.OutputState }

func (WatchlistEntityCountArrayOutput) ElementType 

func (WatchlistEntityCountArrayOutput) ElementType() reflect.Type

func (WatchlistEntityCountArrayOutput) Index 

func (o WatchlistEntityCountArrayOutput) Index(i pulumi.IntInput) WatchlistEntityCountOutput

func (WatchlistEntityCountArrayOutput) ToWatchlistEntityCountArrayOutput 

func (o WatchlistEntityCountArrayOutput) ToWatchlistEntityCountArrayOutput() WatchlistEntityCountArrayOutput

func (WatchlistEntityCountArrayOutput) ToWatchlistEntityCountArrayOutputWithContext 

func (o WatchlistEntityCountArrayOutput) ToWatchlistEntityCountArrayOutputWithContext(ctx context.Context) WatchlistEntityCountArrayOutput

type WatchlistEntityCountInput 

type WatchlistEntityCountInput interface {
	pulumi.Input

	ToWatchlistEntityCountOutput() WatchlistEntityCountOutput
	ToWatchlistEntityCountOutputWithContext(context.Context) WatchlistEntityCountOutput
}

WatchlistEntityCountInput is an input type that accepts WatchlistEntityCountArgs and WatchlistEntityCountOutput values. You can construct a concrete instance of `WatchlistEntityCountInput` via: 

WatchlistEntityCountArgs{...}

type WatchlistEntityCountOutput 

type WatchlistEntityCountOutput struct{ *pulumi.OutputState }

func (WatchlistEntityCountOutput) Asset 

func (o WatchlistEntityCountOutput) Asset() pulumi.IntPtrOutput

(Output) Output only. Count of asset type entities in the watchlist.

func (WatchlistEntityCountOutput) ElementType 

func (WatchlistEntityCountOutput) ElementType() reflect.Type

func (WatchlistEntityCountOutput) ToWatchlistEntityCountOutput 

func (o WatchlistEntityCountOutput) ToWatchlistEntityCountOutput() WatchlistEntityCountOutput

func (WatchlistEntityCountOutput) ToWatchlistEntityCountOutputWithContext 

func (o WatchlistEntityCountOutput) ToWatchlistEntityCountOutputWithContext(ctx context.Context) WatchlistEntityCountOutput

func (WatchlistEntityCountOutput) User 

func (o WatchlistEntityCountOutput) User() pulumi.IntPtrOutput

(Output) Output only. Count of user type entities in the watchlist.

type WatchlistEntityPopulationMechanism 

type WatchlistEntityPopulationMechanism struct {
	// Entities are added manually.
	//
	// ***
	Manual *WatchlistEntityPopulationMechanismManual `pulumi:"manual"`
}

type WatchlistEntityPopulationMechanismArgs 

type WatchlistEntityPopulationMechanismArgs struct {
	// Entities are added manually.
	//
	// ***
	Manual WatchlistEntityPopulationMechanismManualPtrInput `pulumi:"manual"`
}

func (WatchlistEntityPopulationMechanismArgs) ElementType 

func (WatchlistEntityPopulationMechanismArgs) ElementType() reflect.Type

func (WatchlistEntityPopulationMechanismArgs) ToWatchlistEntityPopulationMechanismOutput 

func (i WatchlistEntityPopulationMechanismArgs) ToWatchlistEntityPopulationMechanismOutput() WatchlistEntityPopulationMechanismOutput

func (WatchlistEntityPopulationMechanismArgs) ToWatchlistEntityPopulationMechanismOutputWithContext 

func (i WatchlistEntityPopulationMechanismArgs) ToWatchlistEntityPopulationMechanismOutputWithContext(ctx context.Context) WatchlistEntityPopulationMechanismOutput

func (WatchlistEntityPopulationMechanismArgs) ToWatchlistEntityPopulationMechanismPtrOutput 

func (i WatchlistEntityPopulationMechanismArgs) ToWatchlistEntityPopulationMechanismPtrOutput() WatchlistEntityPopulationMechanismPtrOutput

func (WatchlistEntityPopulationMechanismArgs) ToWatchlistEntityPopulationMechanismPtrOutputWithContext 

func (i WatchlistEntityPopulationMechanismArgs) ToWatchlistEntityPopulationMechanismPtrOutputWithContext(ctx context.Context) WatchlistEntityPopulationMechanismPtrOutput

type WatchlistEntityPopulationMechanismInput 

type WatchlistEntityPopulationMechanismInput interface {
	pulumi.Input

	ToWatchlistEntityPopulationMechanismOutput() WatchlistEntityPopulationMechanismOutput
	ToWatchlistEntityPopulationMechanismOutputWithContext(context.Context) WatchlistEntityPopulationMechanismOutput
}

WatchlistEntityPopulationMechanismInput is an input type that accepts WatchlistEntityPopulationMechanismArgs and WatchlistEntityPopulationMechanismOutput values. You can construct a concrete instance of `WatchlistEntityPopulationMechanismInput` via: 

WatchlistEntityPopulationMechanismArgs{...}

type WatchlistEntityPopulationMechanismManual 

type WatchlistEntityPopulationMechanismManual struct {
}

type WatchlistEntityPopulationMechanismManualArgs 

type WatchlistEntityPopulationMechanismManualArgs struct {
}

func (WatchlistEntityPopulationMechanismManualArgs) ElementType 

func (WatchlistEntityPopulationMechanismManualArgs) ElementType() reflect.Type

func (WatchlistEntityPopulationMechanismManualArgs) ToWatchlistEntityPopulationMechanismManualOutput 

func (i WatchlistEntityPopulationMechanismManualArgs) ToWatchlistEntityPopulationMechanismManualOutput() WatchlistEntityPopulationMechanismManualOutput

func (WatchlistEntityPopulationMechanismManualArgs) ToWatchlistEntityPopulationMechanismManualOutputWithContext 

func (i WatchlistEntityPopulationMechanismManualArgs) ToWatchlistEntityPopulationMechanismManualOutputWithContext(ctx context.Context) WatchlistEntityPopulationMechanismManualOutput

func (WatchlistEntityPopulationMechanismManualArgs) ToWatchlistEntityPopulationMechanismManualPtrOutput 

func (i WatchlistEntityPopulationMechanismManualArgs) ToWatchlistEntityPopulationMechanismManualPtrOutput() WatchlistEntityPopulationMechanismManualPtrOutput

func (WatchlistEntityPopulationMechanismManualArgs) ToWatchlistEntityPopulationMechanismManualPtrOutputWithContext 

func (i WatchlistEntityPopulationMechanismManualArgs) ToWatchlistEntityPopulationMechanismManualPtrOutputWithContext(ctx context.Context) WatchlistEntityPopulationMechanismManualPtrOutput

type WatchlistEntityPopulationMechanismManualInput 

type WatchlistEntityPopulationMechanismManualInput interface {
	pulumi.Input

	ToWatchlistEntityPopulationMechanismManualOutput() WatchlistEntityPopulationMechanismManualOutput
	ToWatchlistEntityPopulationMechanismManualOutputWithContext(context.Context) WatchlistEntityPopulationMechanismManualOutput
}

WatchlistEntityPopulationMechanismManualInput is an input type that accepts WatchlistEntityPopulationMechanismManualArgs and WatchlistEntityPopulationMechanismManualOutput values. You can construct a concrete instance of `WatchlistEntityPopulationMechanismManualInput` via: 

WatchlistEntityPopulationMechanismManualArgs{...}

type WatchlistEntityPopulationMechanismManualOutput 

type WatchlistEntityPopulationMechanismManualOutput struct{ *pulumi.OutputState }

func (WatchlistEntityPopulationMechanismManualOutput) ElementType 

func (WatchlistEntityPopulationMechanismManualOutput) ElementType() reflect.Type

func (WatchlistEntityPopulationMechanismManualOutput) ToWatchlistEntityPopulationMechanismManualOutput 

func (o WatchlistEntityPopulationMechanismManualOutput) ToWatchlistEntityPopulationMechanismManualOutput() WatchlistEntityPopulationMechanismManualOutput

func (WatchlistEntityPopulationMechanismManualOutput) ToWatchlistEntityPopulationMechanismManualOutputWithContext 

func (o WatchlistEntityPopulationMechanismManualOutput) ToWatchlistEntityPopulationMechanismManualOutputWithContext(ctx context.Context) WatchlistEntityPopulationMechanismManualOutput

func (WatchlistEntityPopulationMechanismManualOutput) ToWatchlistEntityPopulationMechanismManualPtrOutput 

func (o WatchlistEntityPopulationMechanismManualOutput) ToWatchlistEntityPopulationMechanismManualPtrOutput() WatchlistEntityPopulationMechanismManualPtrOutput

func (WatchlistEntityPopulationMechanismManualOutput) ToWatchlistEntityPopulationMechanismManualPtrOutputWithContext 

func (o WatchlistEntityPopulationMechanismManualOutput) ToWatchlistEntityPopulationMechanismManualPtrOutputWithContext(ctx context.Context) WatchlistEntityPopulationMechanismManualPtrOutput

type WatchlistEntityPopulationMechanismManualPtrInput 

type WatchlistEntityPopulationMechanismManualPtrInput interface {
	pulumi.Input

	ToWatchlistEntityPopulationMechanismManualPtrOutput() WatchlistEntityPopulationMechanismManualPtrOutput
	ToWatchlistEntityPopulationMechanismManualPtrOutputWithContext(context.Context) WatchlistEntityPopulationMechanismManualPtrOutput
}

WatchlistEntityPopulationMechanismManualPtrInput is an input type that accepts WatchlistEntityPopulationMechanismManualArgs, WatchlistEntityPopulationMechanismManualPtr and WatchlistEntityPopulationMechanismManualPtrOutput values. You can construct a concrete instance of `WatchlistEntityPopulationMechanismManualPtrInput` via: 

        WatchlistEntityPopulationMechanismManualArgs{...}

or:

        nil

func WatchlistEntityPopulationMechanismManualPtr 

func WatchlistEntityPopulationMechanismManualPtr(v *WatchlistEntityPopulationMechanismManualArgs) WatchlistEntityPopulationMechanismManualPtrInput

type WatchlistEntityPopulationMechanismManualPtrOutput 

type WatchlistEntityPopulationMechanismManualPtrOutput struct{ *pulumi.OutputState }

func (WatchlistEntityPopulationMechanismManualPtrOutput) Elem 

func (o WatchlistEntityPopulationMechanismManualPtrOutput) Elem() WatchlistEntityPopulationMechanismManualOutput

func (WatchlistEntityPopulationMechanismManualPtrOutput) ElementType 

func (WatchlistEntityPopulationMechanismManualPtrOutput) ElementType() reflect.Type

func (WatchlistEntityPopulationMechanismManualPtrOutput) ToWatchlistEntityPopulationMechanismManualPtrOutput 

func (o WatchlistEntityPopulationMechanismManualPtrOutput) ToWatchlistEntityPopulationMechanismManualPtrOutput() WatchlistEntityPopulationMechanismManualPtrOutput

func (WatchlistEntityPopulationMechanismManualPtrOutput) ToWatchlistEntityPopulationMechanismManualPtrOutputWithContext 

func (o WatchlistEntityPopulationMechanismManualPtrOutput) ToWatchlistEntityPopulationMechanismManualPtrOutputWithContext(ctx context.Context) WatchlistEntityPopulationMechanismManualPtrOutput

type WatchlistEntityPopulationMechanismOutput 

type WatchlistEntityPopulationMechanismOutput struct{ *pulumi.OutputState }

func (WatchlistEntityPopulationMechanismOutput) ElementType 

func (WatchlistEntityPopulationMechanismOutput) ElementType() reflect.Type

func (WatchlistEntityPopulationMechanismOutput) Manual 

func (o WatchlistEntityPopulationMechanismOutput) Manual() WatchlistEntityPopulationMechanismManualPtrOutput

Entities are added manually.

***

func (WatchlistEntityPopulationMechanismOutput) ToWatchlistEntityPopulationMechanismOutput 

func (o WatchlistEntityPopulationMechanismOutput) ToWatchlistEntityPopulationMechanismOutput() WatchlistEntityPopulationMechanismOutput

func (WatchlistEntityPopulationMechanismOutput) ToWatchlistEntityPopulationMechanismOutputWithContext 

func (o WatchlistEntityPopulationMechanismOutput) ToWatchlistEntityPopulationMechanismOutputWithContext(ctx context.Context) WatchlistEntityPopulationMechanismOutput

func (WatchlistEntityPopulationMechanismOutput) ToWatchlistEntityPopulationMechanismPtrOutput 

func (o WatchlistEntityPopulationMechanismOutput) ToWatchlistEntityPopulationMechanismPtrOutput() WatchlistEntityPopulationMechanismPtrOutput

func (WatchlistEntityPopulationMechanismOutput) ToWatchlistEntityPopulationMechanismPtrOutputWithContext 

func (o WatchlistEntityPopulationMechanismOutput) ToWatchlistEntityPopulationMechanismPtrOutputWithContext(ctx context.Context) WatchlistEntityPopulationMechanismPtrOutput

type WatchlistEntityPopulationMechanismPtrInput 

type WatchlistEntityPopulationMechanismPtrInput interface {
	pulumi.Input

	ToWatchlistEntityPopulationMechanismPtrOutput() WatchlistEntityPopulationMechanismPtrOutput
	ToWatchlistEntityPopulationMechanismPtrOutputWithContext(context.Context) WatchlistEntityPopulationMechanismPtrOutput
}

WatchlistEntityPopulationMechanismPtrInput is an input type that accepts WatchlistEntityPopulationMechanismArgs, WatchlistEntityPopulationMechanismPtr and WatchlistEntityPopulationMechanismPtrOutput values. You can construct a concrete instance of `WatchlistEntityPopulationMechanismPtrInput` via: 

        WatchlistEntityPopulationMechanismArgs{...}

or:

        nil

func WatchlistEntityPopulationMechanismPtr 

func WatchlistEntityPopulationMechanismPtr(v *WatchlistEntityPopulationMechanismArgs) WatchlistEntityPopulationMechanismPtrInput

type WatchlistEntityPopulationMechanismPtrOutput 

type WatchlistEntityPopulationMechanismPtrOutput struct{ *pulumi.OutputState }

func (WatchlistEntityPopulationMechanismPtrOutput) Elem 

func (o WatchlistEntityPopulationMechanismPtrOutput) Elem() WatchlistEntityPopulationMechanismOutput

func (WatchlistEntityPopulationMechanismPtrOutput) ElementType 

func (WatchlistEntityPopulationMechanismPtrOutput) ElementType() reflect.Type

func (WatchlistEntityPopulationMechanismPtrOutput) Manual 

func (o WatchlistEntityPopulationMechanismPtrOutput) Manual() WatchlistEntityPopulationMechanismManualPtrOutput

Entities are added manually.

***

func (WatchlistEntityPopulationMechanismPtrOutput) ToWatchlistEntityPopulationMechanismPtrOutput 

func (o WatchlistEntityPopulationMechanismPtrOutput) ToWatchlistEntityPopulationMechanismPtrOutput() WatchlistEntityPopulationMechanismPtrOutput

func (WatchlistEntityPopulationMechanismPtrOutput) ToWatchlistEntityPopulationMechanismPtrOutputWithContext 

func (o WatchlistEntityPopulationMechanismPtrOutput) ToWatchlistEntityPopulationMechanismPtrOutputWithContext(ctx context.Context) WatchlistEntityPopulationMechanismPtrOutput

type WatchlistInput 

type WatchlistInput interface {
	pulumi.Input

	ToWatchlistOutput() WatchlistOutput
	ToWatchlistOutputWithContext(ctx context.Context) WatchlistOutput
}

type WatchlistMap 

type WatchlistMap map[string]WatchlistInput

func (WatchlistMap) ElementType 

func (WatchlistMap) ElementType() reflect.Type

func (WatchlistMap) ToWatchlistMapOutput 

func (i WatchlistMap) ToWatchlistMapOutput() WatchlistMapOutput

func (WatchlistMap) ToWatchlistMapOutputWithContext 

func (i WatchlistMap) ToWatchlistMapOutputWithContext(ctx context.Context) WatchlistMapOutput

type WatchlistMapInput 

type WatchlistMapInput interface {
	pulumi.Input

	ToWatchlistMapOutput() WatchlistMapOutput
	ToWatchlistMapOutputWithContext(context.Context) WatchlistMapOutput
}

WatchlistMapInput is an input type that accepts WatchlistMap and WatchlistMapOutput values. You can construct a concrete instance of `WatchlistMapInput` via: 

WatchlistMap{ "key": WatchlistArgs{...} }

type WatchlistMapOutput 

type WatchlistMapOutput struct{ *pulumi.OutputState }

func (WatchlistMapOutput) ElementType 

func (WatchlistMapOutput) ElementType() reflect.Type

func (WatchlistMapOutput) MapIndex 

func (o WatchlistMapOutput) MapIndex(k pulumi.StringInput) WatchlistOutput

func (WatchlistMapOutput) ToWatchlistMapOutput 

func (o WatchlistMapOutput) ToWatchlistMapOutput() WatchlistMapOutput

func (WatchlistMapOutput) ToWatchlistMapOutputWithContext 

func (o WatchlistMapOutput) ToWatchlistMapOutputWithContext(ctx context.Context) WatchlistMapOutput

type WatchlistOutput 

type WatchlistOutput struct{ *pulumi.OutputState }

func (WatchlistOutput) CreateTime 

func (o WatchlistOutput) CreateTime() pulumi.StringOutput

Output only. Time the watchlist was created.

func (WatchlistOutput) Description 

func (o WatchlistOutput) Description() pulumi.StringPtrOutput

Optional. Description of the watchlist.

func (WatchlistOutput) DisplayName 

func (o WatchlistOutput) DisplayName() pulumi.StringOutput

Required. Display name of the watchlist. Note that it must be at least one character and less than 63 characters (https://google.aip.dev/148).

func (WatchlistOutput) ElementType 

func (WatchlistOutput) ElementType() reflect.Type

func (WatchlistOutput) EntityCounts 

func (o WatchlistOutput) EntityCounts() WatchlistEntityCountArrayOutput

Count of different types of entities in the watchlist. Structure is documented below.

func (WatchlistOutput) EntityPopulationMechanism 

func (o WatchlistOutput) EntityPopulationMechanism() WatchlistEntityPopulationMechanismOutput

Mechanism to populate entities in the watchlist. Structure is documented below.

func (WatchlistOutput) Instance 

func (o WatchlistOutput) Instance() pulumi.StringOutput

The unique identifier for the Chronicle instance, which is the same as the customer ID.

func (WatchlistOutput) Location 

func (o WatchlistOutput) Location() pulumi.StringOutput

The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".

func (WatchlistOutput) MultiplyingFactor 

func (o WatchlistOutput) MultiplyingFactor() pulumi.Float64PtrOutput

Optional. Weight applied to the risk score for entities in this watchlist. The default is 1.0 if it is not specified.

func (WatchlistOutput) Name 

func (o WatchlistOutput) Name() pulumi.StringOutput

Identifier. Resource name of the watchlist. This unique identifier is generated using values provided for the URL parameters. Format: projects/{project}/locations/{location}/instances/{instance}/watchlists/{watchlist}

func (WatchlistOutput) Project 

func (o WatchlistOutput) Project() pulumi.StringOutput

func (WatchlistOutput) ToWatchlistOutput 

func (o WatchlistOutput) ToWatchlistOutput() WatchlistOutput

func (WatchlistOutput) ToWatchlistOutputWithContext 

func (o WatchlistOutput) ToWatchlistOutputWithContext(ctx context.Context) WatchlistOutput

func (WatchlistOutput) UpdateTime 

func (o WatchlistOutput) UpdateTime() pulumi.StringOutput

Output only. Time the watchlist was last updated.

func (WatchlistOutput) WatchlistId 

func (o WatchlistOutput) WatchlistId() pulumi.StringOutput

Optional. The ID to use for the watchlist, which will become the final component of the watchlist's resource name. This value should be 4-63 characters, and valid characters are /a-z-/.

func (WatchlistOutput) WatchlistUserPreferences 

func (o WatchlistOutput) WatchlistUserPreferences() WatchlistWatchlistUserPreferencesOutput

A collection of user preferences for watchlist UI configuration.

type WatchlistState 

type WatchlistState struct {
	// Output only. Time the watchlist was created.
	CreateTime pulumi.StringPtrInput
	// Optional. Description of the watchlist.
	Description pulumi.StringPtrInput
	// Required. Display name of the watchlist.
	// Note that it must be at least one character and less than 63 characters
	// (https://google.aip.dev/148).
	DisplayName pulumi.StringPtrInput
	// Count of different types of entities in the watchlist.
	// Structure is documented below.
	EntityCounts WatchlistEntityCountArrayInput
	// Mechanism to populate entities in the watchlist.
	// Structure is documented below.
	EntityPopulationMechanism WatchlistEntityPopulationMechanismPtrInput
	// The unique identifier for the Chronicle instance, which is the same as the customer ID.
	Instance pulumi.StringPtrInput
	// The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
	Location pulumi.StringPtrInput
	// Optional. Weight applied to the risk score for entities in this watchlist. The default is 1.0 if it is not specified.
	MultiplyingFactor pulumi.Float64PtrInput
	// Identifier. Resource name of the watchlist. This unique identifier is generated using values provided for the URL parameters.
	// Format:
	// projects/{project}/locations/{location}/instances/{instance}/watchlists/{watchlist}
	Name    pulumi.StringPtrInput
	Project pulumi.StringPtrInput
	// Output only. Time the watchlist was last updated.
	UpdateTime pulumi.StringPtrInput
	// Optional. The ID to use for the watchlist, which will become the final component of the watchlist's resource name. This
	// value should be 4-63 characters, and valid characters are /a-z-/.
	WatchlistId pulumi.StringPtrInput
	// A collection of user preferences for watchlist UI configuration.
	WatchlistUserPreferences WatchlistWatchlistUserPreferencesPtrInput
}

func (WatchlistState) ElementType 

func (WatchlistState) ElementType() reflect.Type

type WatchlistWatchlistUserPreferences 

type WatchlistWatchlistUserPreferences struct {
	// Optional. Whether the watchlist is pinned on the dashboard.
	Pinned *bool `pulumi:"pinned"`
}

type WatchlistWatchlistUserPreferencesArgs 

type WatchlistWatchlistUserPreferencesArgs struct {
	// Optional. Whether the watchlist is pinned on the dashboard.
	Pinned pulumi.BoolPtrInput `pulumi:"pinned"`
}

func (WatchlistWatchlistUserPreferencesArgs) ElementType 

func (WatchlistWatchlistUserPreferencesArgs) ElementType() reflect.Type

func (WatchlistWatchlistUserPreferencesArgs) ToWatchlistWatchlistUserPreferencesOutput 

func (i WatchlistWatchlistUserPreferencesArgs) ToWatchlistWatchlistUserPreferencesOutput() WatchlistWatchlistUserPreferencesOutput

func (WatchlistWatchlistUserPreferencesArgs) ToWatchlistWatchlistUserPreferencesOutputWithContext 

func (i WatchlistWatchlistUserPreferencesArgs) ToWatchlistWatchlistUserPreferencesOutputWithContext(ctx context.Context) WatchlistWatchlistUserPreferencesOutput

func (WatchlistWatchlistUserPreferencesArgs) ToWatchlistWatchlistUserPreferencesPtrOutput 

func (i WatchlistWatchlistUserPreferencesArgs) ToWatchlistWatchlistUserPreferencesPtrOutput() WatchlistWatchlistUserPreferencesPtrOutput

func (WatchlistWatchlistUserPreferencesArgs) ToWatchlistWatchlistUserPreferencesPtrOutputWithContext 

func (i WatchlistWatchlistUserPreferencesArgs) ToWatchlistWatchlistUserPreferencesPtrOutputWithContext(ctx context.Context) WatchlistWatchlistUserPreferencesPtrOutput

type WatchlistWatchlistUserPreferencesInput 

type WatchlistWatchlistUserPreferencesInput interface {
	pulumi.Input

	ToWatchlistWatchlistUserPreferencesOutput() WatchlistWatchlistUserPreferencesOutput
	ToWatchlistWatchlistUserPreferencesOutputWithContext(context.Context) WatchlistWatchlistUserPreferencesOutput
}

WatchlistWatchlistUserPreferencesInput is an input type that accepts WatchlistWatchlistUserPreferencesArgs and WatchlistWatchlistUserPreferencesOutput values. You can construct a concrete instance of `WatchlistWatchlistUserPreferencesInput` via: 

WatchlistWatchlistUserPreferencesArgs{...}

type WatchlistWatchlistUserPreferencesOutput 

type WatchlistWatchlistUserPreferencesOutput struct{ *pulumi.OutputState }

func (WatchlistWatchlistUserPreferencesOutput) ElementType 

func (WatchlistWatchlistUserPreferencesOutput) ElementType() reflect.Type

func (WatchlistWatchlistUserPreferencesOutput) Pinned 

func (o WatchlistWatchlistUserPreferencesOutput) Pinned() pulumi.BoolPtrOutput

Optional. Whether the watchlist is pinned on the dashboard.

func (WatchlistWatchlistUserPreferencesOutput) ToWatchlistWatchlistUserPreferencesOutput 

func (o WatchlistWatchlistUserPreferencesOutput) ToWatchlistWatchlistUserPreferencesOutput() WatchlistWatchlistUserPreferencesOutput

func (WatchlistWatchlistUserPreferencesOutput) ToWatchlistWatchlistUserPreferencesOutputWithContext 

func (o WatchlistWatchlistUserPreferencesOutput) ToWatchlistWatchlistUserPreferencesOutputWithContext(ctx context.Context) WatchlistWatchlistUserPreferencesOutput

func (WatchlistWatchlistUserPreferencesOutput) ToWatchlistWatchlistUserPreferencesPtrOutput 

func (o WatchlistWatchlistUserPreferencesOutput) ToWatchlistWatchlistUserPreferencesPtrOutput() WatchlistWatchlistUserPreferencesPtrOutput

func (WatchlistWatchlistUserPreferencesOutput) ToWatchlistWatchlistUserPreferencesPtrOutputWithContext 

func (o WatchlistWatchlistUserPreferencesOutput) ToWatchlistWatchlistUserPreferencesPtrOutputWithContext(ctx context.Context) WatchlistWatchlistUserPreferencesPtrOutput

type WatchlistWatchlistUserPreferencesPtrInput 

type WatchlistWatchlistUserPreferencesPtrInput interface {
	pulumi.Input

	ToWatchlistWatchlistUserPreferencesPtrOutput() WatchlistWatchlistUserPreferencesPtrOutput
	ToWatchlistWatchlistUserPreferencesPtrOutputWithContext(context.Context) WatchlistWatchlistUserPreferencesPtrOutput
}

WatchlistWatchlistUserPreferencesPtrInput is an input type that accepts WatchlistWatchlistUserPreferencesArgs, WatchlistWatchlistUserPreferencesPtr and WatchlistWatchlistUserPreferencesPtrOutput values. You can construct a concrete instance of `WatchlistWatchlistUserPreferencesPtrInput` via: 

        WatchlistWatchlistUserPreferencesArgs{...}

or:

        nil

func WatchlistWatchlistUserPreferencesPtr 

func WatchlistWatchlistUserPreferencesPtr(v *WatchlistWatchlistUserPreferencesArgs) WatchlistWatchlistUserPreferencesPtrInput

type WatchlistWatchlistUserPreferencesPtrOutput 

type WatchlistWatchlistUserPreferencesPtrOutput struct{ *pulumi.OutputState }

func (WatchlistWatchlistUserPreferencesPtrOutput) Elem 

func (o WatchlistWatchlistUserPreferencesPtrOutput) Elem() WatchlistWatchlistUserPreferencesOutput

func (WatchlistWatchlistUserPreferencesPtrOutput) ElementType 

func (WatchlistWatchlistUserPreferencesPtrOutput) ElementType() reflect.Type

func (WatchlistWatchlistUserPreferencesPtrOutput) Pinned 

func (o WatchlistWatchlistUserPreferencesPtrOutput) Pinned() pulumi.BoolPtrOutput

Optional. Whether the watchlist is pinned on the dashboard.

func (WatchlistWatchlistUserPreferencesPtrOutput) ToWatchlistWatchlistUserPreferencesPtrOutput 

func (o WatchlistWatchlistUserPreferencesPtrOutput) ToWatchlistWatchlistUserPreferencesPtrOutput() WatchlistWatchlistUserPreferencesPtrOutput

func (WatchlistWatchlistUserPreferencesPtrOutput) ToWatchlistWatchlistUserPreferencesPtrOutputWithContext 

func (o WatchlistWatchlistUserPreferencesPtrOutput) ToWatchlistWatchlistUserPreferencesPtrOutputWithContext(ctx context.Context) WatchlistWatchlistUserPreferencesPtrOutput

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.