v1

package
v0.19.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: May 19, 2022 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

View Source
const (
	// Default case. Should never be this.
	AuditLogConfigLogTypeLogTypeUnspecified = AuditLogConfigLogType("LOG_TYPE_UNSPECIFIED")
	// Admin reads. Example: CloudIAM getIamPolicy
	AuditLogConfigLogTypeAdminRead = AuditLogConfigLogType("ADMIN_READ")
	// Data writes. Example: CloudSQL Users create
	AuditLogConfigLogTypeDataWrite = AuditLogConfigLogType("DATA_WRITE")
	// Data reads. Example: CloudSQL Users list
	AuditLogConfigLogTypeDataRead = AuditLogConfigLogType("DATA_READ")
)

Variables

This section is empty.

Functions

This section is empty.

Types

type AuditConfig

type AuditConfig struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs []AuditLogConfig `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service *string `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

type AuditConfigArgs

type AuditConfigArgs struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs AuditLogConfigArrayInput `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service pulumi.StringPtrInput `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (AuditConfigArgs) ElementType

func (AuditConfigArgs) ElementType() reflect.Type

func (AuditConfigArgs) ToAuditConfigOutput

func (i AuditConfigArgs) ToAuditConfigOutput() AuditConfigOutput

func (AuditConfigArgs) ToAuditConfigOutputWithContext

func (i AuditConfigArgs) ToAuditConfigOutputWithContext(ctx context.Context) AuditConfigOutput

type AuditConfigArray

type AuditConfigArray []AuditConfigInput

func (AuditConfigArray) ElementType

func (AuditConfigArray) ElementType() reflect.Type

func (AuditConfigArray) ToAuditConfigArrayOutput

func (i AuditConfigArray) ToAuditConfigArrayOutput() AuditConfigArrayOutput

func (AuditConfigArray) ToAuditConfigArrayOutputWithContext

func (i AuditConfigArray) ToAuditConfigArrayOutputWithContext(ctx context.Context) AuditConfigArrayOutput

type AuditConfigArrayInput

type AuditConfigArrayInput interface {
	pulumi.Input

	ToAuditConfigArrayOutput() AuditConfigArrayOutput
	ToAuditConfigArrayOutputWithContext(context.Context) AuditConfigArrayOutput
}

AuditConfigArrayInput is an input type that accepts AuditConfigArray and AuditConfigArrayOutput values. You can construct a concrete instance of `AuditConfigArrayInput` via:

AuditConfigArray{ AuditConfigArgs{...} }

type AuditConfigArrayOutput

type AuditConfigArrayOutput struct{ *pulumi.OutputState }

func (AuditConfigArrayOutput) ElementType

func (AuditConfigArrayOutput) ElementType() reflect.Type

func (AuditConfigArrayOutput) Index

func (AuditConfigArrayOutput) ToAuditConfigArrayOutput

func (o AuditConfigArrayOutput) ToAuditConfigArrayOutput() AuditConfigArrayOutput

func (AuditConfigArrayOutput) ToAuditConfigArrayOutputWithContext

func (o AuditConfigArrayOutput) ToAuditConfigArrayOutputWithContext(ctx context.Context) AuditConfigArrayOutput

type AuditConfigInput

type AuditConfigInput interface {
	pulumi.Input

	ToAuditConfigOutput() AuditConfigOutput
	ToAuditConfigOutputWithContext(context.Context) AuditConfigOutput
}

AuditConfigInput is an input type that accepts AuditConfigArgs and AuditConfigOutput values. You can construct a concrete instance of `AuditConfigInput` via:

AuditConfigArgs{...}

type AuditConfigOutput

type AuditConfigOutput struct{ *pulumi.OutputState }

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (AuditConfigOutput) AuditLogConfigs

func (o AuditConfigOutput) AuditLogConfigs() AuditLogConfigArrayOutput

The configuration for logging of each type of permission.

func (AuditConfigOutput) ElementType

func (AuditConfigOutput) ElementType() reflect.Type

func (AuditConfigOutput) Service

Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.

func (AuditConfigOutput) ToAuditConfigOutput

func (o AuditConfigOutput) ToAuditConfigOutput() AuditConfigOutput

func (AuditConfigOutput) ToAuditConfigOutputWithContext

func (o AuditConfigOutput) ToAuditConfigOutputWithContext(ctx context.Context) AuditConfigOutput

type AuditConfigResponse

type AuditConfigResponse struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs []AuditLogConfigResponse `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service string `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

type AuditConfigResponseArrayOutput

type AuditConfigResponseArrayOutput struct{ *pulumi.OutputState }

func (AuditConfigResponseArrayOutput) ElementType

func (AuditConfigResponseArrayOutput) Index

func (AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutput

func (o AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutput() AuditConfigResponseArrayOutput

func (AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutputWithContext

func (o AuditConfigResponseArrayOutput) ToAuditConfigResponseArrayOutputWithContext(ctx context.Context) AuditConfigResponseArrayOutput

type AuditConfigResponseOutput

type AuditConfigResponseOutput struct{ *pulumi.OutputState }

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (AuditConfigResponseOutput) AuditLogConfigs

The configuration for logging of each type of permission.

func (AuditConfigResponseOutput) ElementType

func (AuditConfigResponseOutput) ElementType() reflect.Type

func (AuditConfigResponseOutput) Service

Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.

func (AuditConfigResponseOutput) ToAuditConfigResponseOutput

func (o AuditConfigResponseOutput) ToAuditConfigResponseOutput() AuditConfigResponseOutput

func (AuditConfigResponseOutput) ToAuditConfigResponseOutputWithContext

func (o AuditConfigResponseOutput) ToAuditConfigResponseOutputWithContext(ctx context.Context) AuditConfigResponseOutput

type AuditLogConfig

type AuditLogConfig struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers []string `pulumi:"exemptedMembers"`
	// The log type that this config enables.
	LogType *AuditLogConfigLogType `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

type AuditLogConfigArgs

type AuditLogConfigArgs struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers pulumi.StringArrayInput `pulumi:"exemptedMembers"`
	// The log type that this config enables.
	LogType AuditLogConfigLogTypePtrInput `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (AuditLogConfigArgs) ElementType

func (AuditLogConfigArgs) ElementType() reflect.Type

func (AuditLogConfigArgs) ToAuditLogConfigOutput

func (i AuditLogConfigArgs) ToAuditLogConfigOutput() AuditLogConfigOutput

func (AuditLogConfigArgs) ToAuditLogConfigOutputWithContext

func (i AuditLogConfigArgs) ToAuditLogConfigOutputWithContext(ctx context.Context) AuditLogConfigOutput

type AuditLogConfigArray

type AuditLogConfigArray []AuditLogConfigInput

func (AuditLogConfigArray) ElementType

func (AuditLogConfigArray) ElementType() reflect.Type

func (AuditLogConfigArray) ToAuditLogConfigArrayOutput

func (i AuditLogConfigArray) ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput

func (AuditLogConfigArray) ToAuditLogConfigArrayOutputWithContext

func (i AuditLogConfigArray) ToAuditLogConfigArrayOutputWithContext(ctx context.Context) AuditLogConfigArrayOutput

type AuditLogConfigArrayInput

type AuditLogConfigArrayInput interface {
	pulumi.Input

	ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput
	ToAuditLogConfigArrayOutputWithContext(context.Context) AuditLogConfigArrayOutput
}

AuditLogConfigArrayInput is an input type that accepts AuditLogConfigArray and AuditLogConfigArrayOutput values. You can construct a concrete instance of `AuditLogConfigArrayInput` via:

AuditLogConfigArray{ AuditLogConfigArgs{...} }

type AuditLogConfigArrayOutput

type AuditLogConfigArrayOutput struct{ *pulumi.OutputState }

func (AuditLogConfigArrayOutput) ElementType

func (AuditLogConfigArrayOutput) ElementType() reflect.Type

func (AuditLogConfigArrayOutput) Index

func (AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutput

func (o AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutput() AuditLogConfigArrayOutput

func (AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutputWithContext

func (o AuditLogConfigArrayOutput) ToAuditLogConfigArrayOutputWithContext(ctx context.Context) AuditLogConfigArrayOutput

type AuditLogConfigInput

type AuditLogConfigInput interface {
	pulumi.Input

	ToAuditLogConfigOutput() AuditLogConfigOutput
	ToAuditLogConfigOutputWithContext(context.Context) AuditLogConfigOutput
}

AuditLogConfigInput is an input type that accepts AuditLogConfigArgs and AuditLogConfigOutput values. You can construct a concrete instance of `AuditLogConfigInput` via:

AuditLogConfigArgs{...}

type AuditLogConfigLogType added in v0.4.0

type AuditLogConfigLogType string

The log type that this config enables.

func (AuditLogConfigLogType) ElementType added in v0.4.0

func (AuditLogConfigLogType) ElementType() reflect.Type

func (AuditLogConfigLogType) ToAuditLogConfigLogTypeOutput added in v0.6.0

func (e AuditLogConfigLogType) ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput

func (AuditLogConfigLogType) ToAuditLogConfigLogTypeOutputWithContext added in v0.6.0

func (e AuditLogConfigLogType) ToAuditLogConfigLogTypeOutputWithContext(ctx context.Context) AuditLogConfigLogTypeOutput

func (AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutput added in v0.6.0

func (e AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutputWithContext added in v0.6.0

func (e AuditLogConfigLogType) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogType) ToStringOutput added in v0.4.0

func (e AuditLogConfigLogType) ToStringOutput() pulumi.StringOutput

func (AuditLogConfigLogType) ToStringOutputWithContext added in v0.4.0

func (e AuditLogConfigLogType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (AuditLogConfigLogType) ToStringPtrOutput added in v0.4.0

func (e AuditLogConfigLogType) ToStringPtrOutput() pulumi.StringPtrOutput

func (AuditLogConfigLogType) ToStringPtrOutputWithContext added in v0.4.0

func (e AuditLogConfigLogType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type AuditLogConfigLogTypeInput added in v0.6.0

type AuditLogConfigLogTypeInput interface {
	pulumi.Input

	ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput
	ToAuditLogConfigLogTypeOutputWithContext(context.Context) AuditLogConfigLogTypeOutput
}

AuditLogConfigLogTypeInput is an input type that accepts AuditLogConfigLogTypeArgs and AuditLogConfigLogTypeOutput values. You can construct a concrete instance of `AuditLogConfigLogTypeInput` via:

AuditLogConfigLogTypeArgs{...}

type AuditLogConfigLogTypeOutput added in v0.6.0

type AuditLogConfigLogTypeOutput struct{ *pulumi.OutputState }

func (AuditLogConfigLogTypeOutput) ElementType added in v0.6.0

func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutput added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutput() AuditLogConfigLogTypeOutput

func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutputWithContext added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypeOutputWithContext(ctx context.Context) AuditLogConfigLogTypeOutput

func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutput added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutputWithContext added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogTypeOutput) ToStringOutput added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToStringOutput() pulumi.StringOutput

func (AuditLogConfigLogTypeOutput) ToStringOutputWithContext added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (AuditLogConfigLogTypeOutput) ToStringPtrOutput added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (AuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o AuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type AuditLogConfigLogTypePtrInput added in v0.6.0

type AuditLogConfigLogTypePtrInput interface {
	pulumi.Input

	ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput
	ToAuditLogConfigLogTypePtrOutputWithContext(context.Context) AuditLogConfigLogTypePtrOutput
}

func AuditLogConfigLogTypePtr added in v0.6.0

func AuditLogConfigLogTypePtr(v string) AuditLogConfigLogTypePtrInput

type AuditLogConfigLogTypePtrOutput added in v0.6.0

type AuditLogConfigLogTypePtrOutput struct{ *pulumi.OutputState }

func (AuditLogConfigLogTypePtrOutput) Elem added in v0.6.0

func (AuditLogConfigLogTypePtrOutput) ElementType added in v0.6.0

func (AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutput added in v0.6.0

func (o AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutput() AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutputWithContext added in v0.6.0

func (o AuditLogConfigLogTypePtrOutput) ToAuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) AuditLogConfigLogTypePtrOutput

func (AuditLogConfigLogTypePtrOutput) ToStringPtrOutput added in v0.6.0

func (AuditLogConfigLogTypePtrOutput) ToStringPtrOutputWithContext added in v0.6.0

func (o AuditLogConfigLogTypePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type AuditLogConfigOutput

type AuditLogConfigOutput struct{ *pulumi.OutputState }

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (AuditLogConfigOutput) ElementType

func (AuditLogConfigOutput) ElementType() reflect.Type

func (AuditLogConfigOutput) ExemptedMembers

func (o AuditLogConfigOutput) ExemptedMembers() pulumi.StringArrayOutput

Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.

func (AuditLogConfigOutput) LogType

The log type that this config enables.

func (AuditLogConfigOutput) ToAuditLogConfigOutput

func (o AuditLogConfigOutput) ToAuditLogConfigOutput() AuditLogConfigOutput

func (AuditLogConfigOutput) ToAuditLogConfigOutputWithContext

func (o AuditLogConfigOutput) ToAuditLogConfigOutputWithContext(ctx context.Context) AuditLogConfigOutput

type AuditLogConfigResponse

type AuditLogConfigResponse struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers []string `pulumi:"exemptedMembers"`
	// The log type that this config enables.
	LogType string `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

type AuditLogConfigResponseArrayOutput

type AuditLogConfigResponseArrayOutput struct{ *pulumi.OutputState }

func (AuditLogConfigResponseArrayOutput) ElementType

func (AuditLogConfigResponseArrayOutput) Index

func (AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutput

func (o AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutput() AuditLogConfigResponseArrayOutput

func (AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutputWithContext

func (o AuditLogConfigResponseArrayOutput) ToAuditLogConfigResponseArrayOutputWithContext(ctx context.Context) AuditLogConfigResponseArrayOutput

type AuditLogConfigResponseOutput

type AuditLogConfigResponseOutput struct{ *pulumi.OutputState }

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (AuditLogConfigResponseOutput) ElementType

func (AuditLogConfigResponseOutput) ExemptedMembers

Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.

func (AuditLogConfigResponseOutput) LogType

The log type that this config enables.

func (AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutput

func (o AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutput() AuditLogConfigResponseOutput

func (AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutputWithContext

func (o AuditLogConfigResponseOutput) ToAuditLogConfigResponseOutputWithContext(ctx context.Context) AuditLogConfigResponseOutput

type Binding

type Binding struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition *Expr `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`.
	Members []string `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role *string `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

type BindingArgs

type BindingArgs struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition ExprPtrInput `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`.
	Members pulumi.StringArrayInput `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringPtrInput `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

func (BindingArgs) ElementType

func (BindingArgs) ElementType() reflect.Type

func (BindingArgs) ToBindingOutput

func (i BindingArgs) ToBindingOutput() BindingOutput

func (BindingArgs) ToBindingOutputWithContext

func (i BindingArgs) ToBindingOutputWithContext(ctx context.Context) BindingOutput

type BindingArray

type BindingArray []BindingInput

func (BindingArray) ElementType

func (BindingArray) ElementType() reflect.Type

func (BindingArray) ToBindingArrayOutput

func (i BindingArray) ToBindingArrayOutput() BindingArrayOutput

func (BindingArray) ToBindingArrayOutputWithContext

func (i BindingArray) ToBindingArrayOutputWithContext(ctx context.Context) BindingArrayOutput

type BindingArrayInput

type BindingArrayInput interface {
	pulumi.Input

	ToBindingArrayOutput() BindingArrayOutput
	ToBindingArrayOutputWithContext(context.Context) BindingArrayOutput
}

BindingArrayInput is an input type that accepts BindingArray and BindingArrayOutput values. You can construct a concrete instance of `BindingArrayInput` via:

BindingArray{ BindingArgs{...} }

type BindingArrayOutput

type BindingArrayOutput struct{ *pulumi.OutputState }

func (BindingArrayOutput) ElementType

func (BindingArrayOutput) ElementType() reflect.Type

func (BindingArrayOutput) Index

func (BindingArrayOutput) ToBindingArrayOutput

func (o BindingArrayOutput) ToBindingArrayOutput() BindingArrayOutput

func (BindingArrayOutput) ToBindingArrayOutputWithContext

func (o BindingArrayOutput) ToBindingArrayOutputWithContext(ctx context.Context) BindingArrayOutput

type BindingInput

type BindingInput interface {
	pulumi.Input

	ToBindingOutput() BindingOutput
	ToBindingOutputWithContext(context.Context) BindingOutput
}

BindingInput is an input type that accepts BindingArgs and BindingOutput values. You can construct a concrete instance of `BindingInput` via:

BindingArgs{...}

type BindingOutput

type BindingOutput struct{ *pulumi.OutputState }

Associates `members`, or principals, with a `role`.

func (BindingOutput) Condition

func (o BindingOutput) Condition() ExprPtrOutput

The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (BindingOutput) ElementType

func (BindingOutput) ElementType() reflect.Type

func (BindingOutput) Members

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`.

func (BindingOutput) Role

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BindingOutput) ToBindingOutput

func (o BindingOutput) ToBindingOutput() BindingOutput

func (BindingOutput) ToBindingOutputWithContext

func (o BindingOutput) ToBindingOutputWithContext(ctx context.Context) BindingOutput

type BindingResponse

type BindingResponse struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition ExprResponse `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`.
	Members []string `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role string `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

type BindingResponseArrayOutput

type BindingResponseArrayOutput struct{ *pulumi.OutputState }

func (BindingResponseArrayOutput) ElementType

func (BindingResponseArrayOutput) ElementType() reflect.Type

func (BindingResponseArrayOutput) Index

func (BindingResponseArrayOutput) ToBindingResponseArrayOutput

func (o BindingResponseArrayOutput) ToBindingResponseArrayOutput() BindingResponseArrayOutput

func (BindingResponseArrayOutput) ToBindingResponseArrayOutputWithContext

func (o BindingResponseArrayOutput) ToBindingResponseArrayOutputWithContext(ctx context.Context) BindingResponseArrayOutput

type BindingResponseOutput

type BindingResponseOutput struct{ *pulumi.OutputState }

Associates `members`, or principals, with a `role`.

func (BindingResponseOutput) Condition

The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (BindingResponseOutput) ElementType

func (BindingResponseOutput) ElementType() reflect.Type

func (BindingResponseOutput) Members

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`.

func (BindingResponseOutput) Role

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (BindingResponseOutput) ToBindingResponseOutput

func (o BindingResponseOutput) ToBindingResponseOutput() BindingResponseOutput

func (BindingResponseOutput) ToBindingResponseOutputWithContext

func (o BindingResponseOutput) ToBindingResponseOutputWithContext(ctx context.Context) BindingResponseOutput

type Expr

type Expr struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression *string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location *string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title *string `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

type ExprArgs

type ExprArgs struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringPtrInput `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location pulumi.StringPtrInput `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title pulumi.StringPtrInput `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ExprArgs) ElementType

func (ExprArgs) ElementType() reflect.Type

func (ExprArgs) ToExprOutput

func (i ExprArgs) ToExprOutput() ExprOutput

func (ExprArgs) ToExprOutputWithContext

func (i ExprArgs) ToExprOutputWithContext(ctx context.Context) ExprOutput

func (ExprArgs) ToExprPtrOutput

func (i ExprArgs) ToExprPtrOutput() ExprPtrOutput

func (ExprArgs) ToExprPtrOutputWithContext

func (i ExprArgs) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput

type ExprInput

type ExprInput interface {
	pulumi.Input

	ToExprOutput() ExprOutput
	ToExprOutputWithContext(context.Context) ExprOutput
}

ExprInput is an input type that accepts ExprArgs and ExprOutput values. You can construct a concrete instance of `ExprInput` via:

ExprArgs{...}

type ExprOutput

type ExprOutput struct{ *pulumi.OutputState }

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ExprOutput) Description

func (o ExprOutput) Description() pulumi.StringPtrOutput

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ExprOutput) ElementType

func (ExprOutput) ElementType() reflect.Type

func (ExprOutput) Expression

func (o ExprOutput) Expression() pulumi.StringPtrOutput

Textual representation of an expression in Common Expression Language syntax.

func (ExprOutput) Location

func (o ExprOutput) Location() pulumi.StringPtrOutput

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ExprOutput) Title

func (o ExprOutput) Title() pulumi.StringPtrOutput

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ExprOutput) ToExprOutput

func (o ExprOutput) ToExprOutput() ExprOutput

func (ExprOutput) ToExprOutputWithContext

func (o ExprOutput) ToExprOutputWithContext(ctx context.Context) ExprOutput

func (ExprOutput) ToExprPtrOutput

func (o ExprOutput) ToExprPtrOutput() ExprPtrOutput

func (ExprOutput) ToExprPtrOutputWithContext

func (o ExprOutput) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput

type ExprPtrInput

type ExprPtrInput interface {
	pulumi.Input

	ToExprPtrOutput() ExprPtrOutput
	ToExprPtrOutputWithContext(context.Context) ExprPtrOutput
}

ExprPtrInput is an input type that accepts ExprArgs, ExprPtr and ExprPtrOutput values. You can construct a concrete instance of `ExprPtrInput` via:

        ExprArgs{...}

or:

        nil

func ExprPtr

func ExprPtr(v *ExprArgs) ExprPtrInput

type ExprPtrOutput

type ExprPtrOutput struct{ *pulumi.OutputState }

func (ExprPtrOutput) Description

func (o ExprPtrOutput) Description() pulumi.StringPtrOutput

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ExprPtrOutput) Elem

func (o ExprPtrOutput) Elem() ExprOutput

func (ExprPtrOutput) ElementType

func (ExprPtrOutput) ElementType() reflect.Type

func (ExprPtrOutput) Expression

func (o ExprPtrOutput) Expression() pulumi.StringPtrOutput

Textual representation of an expression in Common Expression Language syntax.

func (ExprPtrOutput) Location

func (o ExprPtrOutput) Location() pulumi.StringPtrOutput

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ExprPtrOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ExprPtrOutput) ToExprPtrOutput

func (o ExprPtrOutput) ToExprPtrOutput() ExprPtrOutput

func (ExprPtrOutput) ToExprPtrOutputWithContext

func (o ExprPtrOutput) ToExprPtrOutputWithContext(ctx context.Context) ExprPtrOutput

type ExprResponse

type ExprResponse struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title string `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

type ExprResponseOutput

type ExprResponseOutput struct{ *pulumi.OutputState }

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (ExprResponseOutput) Description

func (o ExprResponseOutput) Description() pulumi.StringOutput

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (ExprResponseOutput) ElementType

func (ExprResponseOutput) ElementType() reflect.Type

func (ExprResponseOutput) Expression

func (o ExprResponseOutput) Expression() pulumi.StringOutput

Textual representation of an expression in Common Expression Language syntax.

func (ExprResponseOutput) Location

func (o ExprResponseOutput) Location() pulumi.StringOutput

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (ExprResponseOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (ExprResponseOutput) ToExprResponseOutput

func (o ExprResponseOutput) ToExprResponseOutput() ExprResponseOutput

func (ExprResponseOutput) ToExprResponseOutputWithContext

func (o ExprResponseOutput) ToExprResponseOutputWithContext(ctx context.Context) ExprResponseOutput

type FolderBigQueryExport added in v0.16.0

type FolderBigQueryExport struct {
	pulumi.CustomResourceState

	// The time at which the big query export was created. This field is set by the server and will be ignored if provided on export on creation.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
	Dataset pulumi.StringOutput `pulumi:"dataset"`
	// The description of the export (max of 1024 characters).
	Description pulumi.StringOutput `pulumi:"description"`
	// Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.
	Filter pulumi.StringOutput `pulumi:"filter"`
	// Email address of the user who last edited the big query export. This field is set by the server and will be ignored if provided on export creation or update.
	MostRecentEditor pulumi.StringOutput `pulumi:"mostRecentEditor"`
	// The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.
	Name pulumi.StringOutput `pulumi:"name"`
	// The service account that needs permission to create table, upload data to the big query dataset.
	Principal pulumi.StringOutput `pulumi:"principal"`
	// The most recent time at which the big export was updated. This field is set by the server and will be ignored if provided on export creation or update.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a big query export. Auto-naming is currently not supported for this resource.

func GetFolderBigQueryExport added in v0.16.0

func GetFolderBigQueryExport(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *FolderBigQueryExportState, opts ...pulumi.ResourceOption) (*FolderBigQueryExport, error)

GetFolderBigQueryExport gets an existing FolderBigQueryExport resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewFolderBigQueryExport added in v0.16.0

func NewFolderBigQueryExport(ctx *pulumi.Context,
	name string, args *FolderBigQueryExportArgs, opts ...pulumi.ResourceOption) (*FolderBigQueryExport, error)

NewFolderBigQueryExport registers a new resource with the given unique name, arguments, and options.

func (*FolderBigQueryExport) ElementType added in v0.16.0

func (*FolderBigQueryExport) ElementType() reflect.Type

func (*FolderBigQueryExport) ToFolderBigQueryExportOutput added in v0.16.0

func (i *FolderBigQueryExport) ToFolderBigQueryExportOutput() FolderBigQueryExportOutput

func (*FolderBigQueryExport) ToFolderBigQueryExportOutputWithContext added in v0.16.0

func (i *FolderBigQueryExport) ToFolderBigQueryExportOutputWithContext(ctx context.Context) FolderBigQueryExportOutput

type FolderBigQueryExportArgs added in v0.16.0

type FolderBigQueryExportArgs struct {
	// Required. Unique identifier provided by the client within the parent scope. It must consist of lower case letters, numbers, and hyphen, with the first character a letter, the last a letter or a number, and a 63 character maximum.
	BigQueryExportId pulumi.StringInput
	// The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
	Dataset pulumi.StringPtrInput
	// The description of the export (max of 1024 characters).
	Description pulumi.StringPtrInput
	// Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.
	Filter   pulumi.StringPtrInput
	FolderId pulumi.StringInput
	// The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.
	Name pulumi.StringPtrInput
}

The set of arguments for constructing a FolderBigQueryExport resource.

func (FolderBigQueryExportArgs) ElementType added in v0.16.0

func (FolderBigQueryExportArgs) ElementType() reflect.Type

type FolderBigQueryExportInput added in v0.16.0

type FolderBigQueryExportInput interface {
	pulumi.Input

	ToFolderBigQueryExportOutput() FolderBigQueryExportOutput
	ToFolderBigQueryExportOutputWithContext(ctx context.Context) FolderBigQueryExportOutput
}

type FolderBigQueryExportOutput added in v0.16.0

type FolderBigQueryExportOutput struct{ *pulumi.OutputState }

func (FolderBigQueryExportOutput) CreateTime added in v0.19.0

The time at which the big query export was created. This field is set by the server and will be ignored if provided on export on creation.

func (FolderBigQueryExportOutput) Dataset added in v0.19.0

The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).

func (FolderBigQueryExportOutput) Description added in v0.19.0

The description of the export (max of 1024 characters).

func (FolderBigQueryExportOutput) ElementType added in v0.16.0

func (FolderBigQueryExportOutput) ElementType() reflect.Type

func (FolderBigQueryExportOutput) Filter added in v0.19.0

Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.

func (FolderBigQueryExportOutput) MostRecentEditor added in v0.19.0

func (o FolderBigQueryExportOutput) MostRecentEditor() pulumi.StringOutput

Email address of the user who last edited the big query export. This field is set by the server and will be ignored if provided on export creation or update.

func (FolderBigQueryExportOutput) Name added in v0.19.0

The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.

func (FolderBigQueryExportOutput) Principal added in v0.19.0

The service account that needs permission to create table, upload data to the big query dataset.

func (FolderBigQueryExportOutput) ToFolderBigQueryExportOutput added in v0.16.0

func (o FolderBigQueryExportOutput) ToFolderBigQueryExportOutput() FolderBigQueryExportOutput

func (FolderBigQueryExportOutput) ToFolderBigQueryExportOutputWithContext added in v0.16.0

func (o FolderBigQueryExportOutput) ToFolderBigQueryExportOutputWithContext(ctx context.Context) FolderBigQueryExportOutput

func (FolderBigQueryExportOutput) UpdateTime added in v0.19.0

The most recent time at which the big export was updated. This field is set by the server and will be ignored if provided on export creation or update.

type FolderBigQueryExportState added in v0.16.0

type FolderBigQueryExportState struct {
}

func (FolderBigQueryExportState) ElementType added in v0.16.0

func (FolderBigQueryExportState) ElementType() reflect.Type

type LookupFolderBigQueryExportArgs added in v0.16.0

type LookupFolderBigQueryExportArgs struct {
	BigQueryExportId string `pulumi:"bigQueryExportId"`
	FolderId         string `pulumi:"folderId"`
}

type LookupFolderBigQueryExportOutputArgs added in v0.16.0

type LookupFolderBigQueryExportOutputArgs struct {
	BigQueryExportId pulumi.StringInput `pulumi:"bigQueryExportId"`
	FolderId         pulumi.StringInput `pulumi:"folderId"`
}

func (LookupFolderBigQueryExportOutputArgs) ElementType added in v0.16.0

type LookupFolderBigQueryExportResult added in v0.16.0

type LookupFolderBigQueryExportResult struct {
	// The time at which the big query export was created. This field is set by the server and will be ignored if provided on export on creation.
	CreateTime string `pulumi:"createTime"`
	// The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
	Dataset string `pulumi:"dataset"`
	// The description of the export (max of 1024 characters).
	Description string `pulumi:"description"`
	// Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.
	Filter string `pulumi:"filter"`
	// Email address of the user who last edited the big query export. This field is set by the server and will be ignored if provided on export creation or update.
	MostRecentEditor string `pulumi:"mostRecentEditor"`
	// The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.
	Name string `pulumi:"name"`
	// The service account that needs permission to create table, upload data to the big query dataset.
	Principal string `pulumi:"principal"`
	// The most recent time at which the big export was updated. This field is set by the server and will be ignored if provided on export creation or update.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupFolderBigQueryExport added in v0.16.0

func LookupFolderBigQueryExport(ctx *pulumi.Context, args *LookupFolderBigQueryExportArgs, opts ...pulumi.InvokeOption) (*LookupFolderBigQueryExportResult, error)

Gets a big query export.

type LookupFolderBigQueryExportResultOutput added in v0.16.0

type LookupFolderBigQueryExportResultOutput struct{ *pulumi.OutputState }

func (LookupFolderBigQueryExportResultOutput) CreateTime added in v0.16.0

The time at which the big query export was created. This field is set by the server and will be ignored if provided on export on creation.

func (LookupFolderBigQueryExportResultOutput) Dataset added in v0.16.0

The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).

func (LookupFolderBigQueryExportResultOutput) Description added in v0.16.0

The description of the export (max of 1024 characters).

func (LookupFolderBigQueryExportResultOutput) ElementType added in v0.16.0

func (LookupFolderBigQueryExportResultOutput) Filter added in v0.16.0

Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.

func (LookupFolderBigQueryExportResultOutput) MostRecentEditor added in v0.16.0

Email address of the user who last edited the big query export. This field is set by the server and will be ignored if provided on export creation or update.

func (LookupFolderBigQueryExportResultOutput) Name added in v0.16.0

The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.

func (LookupFolderBigQueryExportResultOutput) Principal added in v0.16.0

The service account that needs permission to create table, upload data to the big query dataset.

func (LookupFolderBigQueryExportResultOutput) ToLookupFolderBigQueryExportResultOutput added in v0.16.0

func (o LookupFolderBigQueryExportResultOutput) ToLookupFolderBigQueryExportResultOutput() LookupFolderBigQueryExportResultOutput

func (LookupFolderBigQueryExportResultOutput) ToLookupFolderBigQueryExportResultOutputWithContext added in v0.16.0

func (o LookupFolderBigQueryExportResultOutput) ToLookupFolderBigQueryExportResultOutputWithContext(ctx context.Context) LookupFolderBigQueryExportResultOutput

func (LookupFolderBigQueryExportResultOutput) UpdateTime added in v0.16.0

The most recent time at which the big export was updated. This field is set by the server and will be ignored if provided on export creation or update.

type LookupMuteConfigArgs added in v0.9.0

type LookupMuteConfigArgs struct {
	MuteConfigId string  `pulumi:"muteConfigId"`
	Project      *string `pulumi:"project"`
}

type LookupMuteConfigOutputArgs added in v0.9.0

type LookupMuteConfigOutputArgs struct {
	MuteConfigId pulumi.StringInput    `pulumi:"muteConfigId"`
	Project      pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupMuteConfigOutputArgs) ElementType added in v0.9.0

func (LookupMuteConfigOutputArgs) ElementType() reflect.Type

type LookupMuteConfigResult added in v0.9.0

type LookupMuteConfigResult struct {
	// The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.
	CreateTime string `pulumi:"createTime"`
	// A description of the mute config.
	Description string `pulumi:"description"`
	// The human readable name to be displayed for the mute config.
	DisplayName string `pulumi:"displayName"`
	// An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
	Filter string `pulumi:"filter"`
	// Email address of the user who last edited the mute config. This field is set by the server and will be ignored if provided on config creation or update.
	MostRecentEditor string `pulumi:"mostRecentEditor"`
	// This field will be ignored if provided on config creation. Format "organizations/{organization}/muteConfigs/{mute_config}" "folders/{folder}/muteConfigs/{mute_config}" "projects/{project}/muteConfigs/{mute_config}"
	Name string `pulumi:"name"`
	// The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupMuteConfig added in v0.9.0

func LookupMuteConfig(ctx *pulumi.Context, args *LookupMuteConfigArgs, opts ...pulumi.InvokeOption) (*LookupMuteConfigResult, error)

Gets a mute config.

type LookupMuteConfigResultOutput added in v0.9.0

type LookupMuteConfigResultOutput struct{ *pulumi.OutputState }

func LookupMuteConfigOutput added in v0.9.0

func (LookupMuteConfigResultOutput) CreateTime added in v0.9.0

The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.

func (LookupMuteConfigResultOutput) Description added in v0.9.0

A description of the mute config.

func (LookupMuteConfigResultOutput) DisplayName added in v0.9.0

The human readable name to be displayed for the mute config.

func (LookupMuteConfigResultOutput) ElementType added in v0.9.0

func (LookupMuteConfigResultOutput) Filter added in v0.9.0

An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`

func (LookupMuteConfigResultOutput) MostRecentEditor added in v0.9.0

func (o LookupMuteConfigResultOutput) MostRecentEditor() pulumi.StringOutput

Email address of the user who last edited the mute config. This field is set by the server and will be ignored if provided on config creation or update.

func (LookupMuteConfigResultOutput) Name added in v0.9.0

This field will be ignored if provided on config creation. Format "organizations/{organization}/muteConfigs/{mute_config}" "folders/{folder}/muteConfigs/{mute_config}" "projects/{project}/muteConfigs/{mute_config}"

func (LookupMuteConfigResultOutput) ToLookupMuteConfigResultOutput added in v0.9.0

func (o LookupMuteConfigResultOutput) ToLookupMuteConfigResultOutput() LookupMuteConfigResultOutput

func (LookupMuteConfigResultOutput) ToLookupMuteConfigResultOutputWithContext added in v0.9.0

func (o LookupMuteConfigResultOutput) ToLookupMuteConfigResultOutputWithContext(ctx context.Context) LookupMuteConfigResultOutput

func (LookupMuteConfigResultOutput) UpdateTime added in v0.9.0

The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update.

type LookupNotificationConfigArgs added in v0.4.0

type LookupNotificationConfigArgs struct {
	NotificationConfigId string `pulumi:"notificationConfigId"`
	OrganizationId       string `pulumi:"organizationId"`
}

type LookupNotificationConfigOutputArgs added in v0.8.0

type LookupNotificationConfigOutputArgs struct {
	NotificationConfigId pulumi.StringInput `pulumi:"notificationConfigId"`
	OrganizationId       pulumi.StringInput `pulumi:"organizationId"`
}

func (LookupNotificationConfigOutputArgs) ElementType added in v0.8.0

type LookupNotificationConfigResult added in v0.4.0

type LookupNotificationConfigResult struct {
	// The description of the notification config (max of 1024 characters).
	Description string `pulumi:"description"`
	// The relative resource name of this notification config. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/notificationConfigs/notify_public_bucket".
	Name string `pulumi:"name"`
	// The Pub/Sub topic to send notifications to. Its format is "projects/[project_id]/topics/[topic]".
	PubsubTopic string `pulumi:"pubsubTopic"`
	// The service account that needs "pubsub.topics.publish" permission to publish to the Pub/Sub topic.
	ServiceAccount string `pulumi:"serviceAccount"`
	// The config for triggering streaming-based notifications.
	StreamingConfig StreamingConfigResponse `pulumi:"streamingConfig"`
}

func LookupNotificationConfig added in v0.4.0

func LookupNotificationConfig(ctx *pulumi.Context, args *LookupNotificationConfigArgs, opts ...pulumi.InvokeOption) (*LookupNotificationConfigResult, error)

Gets a notification config.

type LookupNotificationConfigResultOutput added in v0.8.0

type LookupNotificationConfigResultOutput struct{ *pulumi.OutputState }

func (LookupNotificationConfigResultOutput) Description added in v0.8.0

The description of the notification config (max of 1024 characters).

func (LookupNotificationConfigResultOutput) ElementType added in v0.8.0

func (LookupNotificationConfigResultOutput) Name added in v0.8.0

The relative resource name of this notification config. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/notificationConfigs/notify_public_bucket".

func (LookupNotificationConfigResultOutput) PubsubTopic added in v0.8.0

The Pub/Sub topic to send notifications to. Its format is "projects/[project_id]/topics/[topic]".

func (LookupNotificationConfigResultOutput) ServiceAccount added in v0.8.0

The service account that needs "pubsub.topics.publish" permission to publish to the Pub/Sub topic.

func (LookupNotificationConfigResultOutput) StreamingConfig added in v0.8.0

The config for triggering streaming-based notifications.

func (LookupNotificationConfigResultOutput) ToLookupNotificationConfigResultOutput added in v0.8.0

func (o LookupNotificationConfigResultOutput) ToLookupNotificationConfigResultOutput() LookupNotificationConfigResultOutput

func (LookupNotificationConfigResultOutput) ToLookupNotificationConfigResultOutputWithContext added in v0.8.0

func (o LookupNotificationConfigResultOutput) ToLookupNotificationConfigResultOutputWithContext(ctx context.Context) LookupNotificationConfigResultOutput

type LookupOrganizationBigQueryExportArgs added in v0.16.0

type LookupOrganizationBigQueryExportArgs struct {
	BigQueryExportId string `pulumi:"bigQueryExportId"`
	OrganizationId   string `pulumi:"organizationId"`
}

type LookupOrganizationBigQueryExportOutputArgs added in v0.16.0

type LookupOrganizationBigQueryExportOutputArgs struct {
	BigQueryExportId pulumi.StringInput `pulumi:"bigQueryExportId"`
	OrganizationId   pulumi.StringInput `pulumi:"organizationId"`
}

func (LookupOrganizationBigQueryExportOutputArgs) ElementType added in v0.16.0

type LookupOrganizationBigQueryExportResult added in v0.16.0

type LookupOrganizationBigQueryExportResult struct {
	// The time at which the big query export was created. This field is set by the server and will be ignored if provided on export on creation.
	CreateTime string `pulumi:"createTime"`
	// The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
	Dataset string `pulumi:"dataset"`
	// The description of the export (max of 1024 characters).
	Description string `pulumi:"description"`
	// Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.
	Filter string `pulumi:"filter"`
	// Email address of the user who last edited the big query export. This field is set by the server and will be ignored if provided on export creation or update.
	MostRecentEditor string `pulumi:"mostRecentEditor"`
	// The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.
	Name string `pulumi:"name"`
	// The service account that needs permission to create table, upload data to the big query dataset.
	Principal string `pulumi:"principal"`
	// The most recent time at which the big export was updated. This field is set by the server and will be ignored if provided on export creation or update.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupOrganizationBigQueryExport added in v0.16.0

Gets a big query export.

type LookupOrganizationBigQueryExportResultOutput added in v0.16.0

type LookupOrganizationBigQueryExportResultOutput struct{ *pulumi.OutputState }

func (LookupOrganizationBigQueryExportResultOutput) CreateTime added in v0.16.0

The time at which the big query export was created. This field is set by the server and will be ignored if provided on export on creation.

func (LookupOrganizationBigQueryExportResultOutput) Dataset added in v0.16.0

The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).

func (LookupOrganizationBigQueryExportResultOutput) Description added in v0.16.0

The description of the export (max of 1024 characters).

func (LookupOrganizationBigQueryExportResultOutput) ElementType added in v0.16.0

func (LookupOrganizationBigQueryExportResultOutput) Filter added in v0.16.0

Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.

func (LookupOrganizationBigQueryExportResultOutput) MostRecentEditor added in v0.16.0

Email address of the user who last edited the big query export. This field is set by the server and will be ignored if provided on export creation or update.

func (LookupOrganizationBigQueryExportResultOutput) Name added in v0.16.0

The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.

func (LookupOrganizationBigQueryExportResultOutput) Principal added in v0.16.0

The service account that needs permission to create table, upload data to the big query dataset.

func (LookupOrganizationBigQueryExportResultOutput) ToLookupOrganizationBigQueryExportResultOutput added in v0.16.0

func (o LookupOrganizationBigQueryExportResultOutput) ToLookupOrganizationBigQueryExportResultOutput() LookupOrganizationBigQueryExportResultOutput

func (LookupOrganizationBigQueryExportResultOutput) ToLookupOrganizationBigQueryExportResultOutputWithContext added in v0.16.0

func (o LookupOrganizationBigQueryExportResultOutput) ToLookupOrganizationBigQueryExportResultOutputWithContext(ctx context.Context) LookupOrganizationBigQueryExportResultOutput

func (LookupOrganizationBigQueryExportResultOutput) UpdateTime added in v0.16.0

The most recent time at which the big export was updated. This field is set by the server and will be ignored if provided on export creation or update.

type LookupOrganizationMuteConfigArgs added in v0.9.0

type LookupOrganizationMuteConfigArgs struct {
	MuteConfigId   string `pulumi:"muteConfigId"`
	OrganizationId string `pulumi:"organizationId"`
}

type LookupOrganizationMuteConfigOutputArgs added in v0.9.0

type LookupOrganizationMuteConfigOutputArgs struct {
	MuteConfigId   pulumi.StringInput `pulumi:"muteConfigId"`
	OrganizationId pulumi.StringInput `pulumi:"organizationId"`
}

func (LookupOrganizationMuteConfigOutputArgs) ElementType added in v0.9.0

type LookupOrganizationMuteConfigResult added in v0.9.0

type LookupOrganizationMuteConfigResult struct {
	// The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.
	CreateTime string `pulumi:"createTime"`
	// A description of the mute config.
	Description string `pulumi:"description"`
	// The human readable name to be displayed for the mute config.
	DisplayName string `pulumi:"displayName"`
	// An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
	Filter string `pulumi:"filter"`
	// Email address of the user who last edited the mute config. This field is set by the server and will be ignored if provided on config creation or update.
	MostRecentEditor string `pulumi:"mostRecentEditor"`
	// This field will be ignored if provided on config creation. Format "organizations/{organization}/muteConfigs/{mute_config}" "folders/{folder}/muteConfigs/{mute_config}" "projects/{project}/muteConfigs/{mute_config}"
	Name string `pulumi:"name"`
	// The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupOrganizationMuteConfig added in v0.9.0

func LookupOrganizationMuteConfig(ctx *pulumi.Context, args *LookupOrganizationMuteConfigArgs, opts ...pulumi.InvokeOption) (*LookupOrganizationMuteConfigResult, error)

Gets a mute config.

type LookupOrganizationMuteConfigResultOutput added in v0.9.0

type LookupOrganizationMuteConfigResultOutput struct{ *pulumi.OutputState }

func (LookupOrganizationMuteConfigResultOutput) CreateTime added in v0.9.0

The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.

func (LookupOrganizationMuteConfigResultOutput) Description added in v0.9.0

A description of the mute config.

func (LookupOrganizationMuteConfigResultOutput) DisplayName added in v0.9.0

The human readable name to be displayed for the mute config.

func (LookupOrganizationMuteConfigResultOutput) ElementType added in v0.9.0

func (LookupOrganizationMuteConfigResultOutput) Filter added in v0.9.0

An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`

func (LookupOrganizationMuteConfigResultOutput) MostRecentEditor added in v0.9.0

Email address of the user who last edited the mute config. This field is set by the server and will be ignored if provided on config creation or update.

func (LookupOrganizationMuteConfigResultOutput) Name added in v0.9.0

This field will be ignored if provided on config creation. Format "organizations/{organization}/muteConfigs/{mute_config}" "folders/{folder}/muteConfigs/{mute_config}" "projects/{project}/muteConfigs/{mute_config}"

func (LookupOrganizationMuteConfigResultOutput) ToLookupOrganizationMuteConfigResultOutput added in v0.9.0

func (o LookupOrganizationMuteConfigResultOutput) ToLookupOrganizationMuteConfigResultOutput() LookupOrganizationMuteConfigResultOutput

func (LookupOrganizationMuteConfigResultOutput) ToLookupOrganizationMuteConfigResultOutputWithContext added in v0.9.0

func (o LookupOrganizationMuteConfigResultOutput) ToLookupOrganizationMuteConfigResultOutputWithContext(ctx context.Context) LookupOrganizationMuteConfigResultOutput

func (LookupOrganizationMuteConfigResultOutput) UpdateTime added in v0.9.0

The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update.

type LookupOrganizationSourceIamPolicyArgs added in v0.4.0

type LookupOrganizationSourceIamPolicyArgs struct {
	OrganizationId string `pulumi:"organizationId"`
	SourceId       string `pulumi:"sourceId"`
}

type LookupOrganizationSourceIamPolicyOutputArgs added in v0.8.0

type LookupOrganizationSourceIamPolicyOutputArgs struct {
	OrganizationId pulumi.StringInput `pulumi:"organizationId"`
	SourceId       pulumi.StringInput `pulumi:"sourceId"`
}

func (LookupOrganizationSourceIamPolicyOutputArgs) ElementType added in v0.8.0

type LookupOrganizationSourceIamPolicyResult added in v0.4.0

type LookupOrganizationSourceIamPolicyResult struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []AuditConfigResponse `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

func LookupOrganizationSourceIamPolicy added in v0.4.0

Gets the access control policy on the specified Source.

type LookupOrganizationSourceIamPolicyResultOutput added in v0.8.0

type LookupOrganizationSourceIamPolicyResultOutput struct{ *pulumi.OutputState }

func (LookupOrganizationSourceIamPolicyResultOutput) AuditConfigs added in v0.8.0

Specifies cloud audit logging configuration for this policy.

func (LookupOrganizationSourceIamPolicyResultOutput) Bindings added in v0.8.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (LookupOrganizationSourceIamPolicyResultOutput) ElementType added in v0.8.0

func (LookupOrganizationSourceIamPolicyResultOutput) Etag added in v0.8.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (LookupOrganizationSourceIamPolicyResultOutput) ToLookupOrganizationSourceIamPolicyResultOutput added in v0.8.0

func (o LookupOrganizationSourceIamPolicyResultOutput) ToLookupOrganizationSourceIamPolicyResultOutput() LookupOrganizationSourceIamPolicyResultOutput

func (LookupOrganizationSourceIamPolicyResultOutput) ToLookupOrganizationSourceIamPolicyResultOutputWithContext added in v0.8.0

func (o LookupOrganizationSourceIamPolicyResultOutput) ToLookupOrganizationSourceIamPolicyResultOutputWithContext(ctx context.Context) LookupOrganizationSourceIamPolicyResultOutput

func (LookupOrganizationSourceIamPolicyResultOutput) Version added in v0.8.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type LookupProjectBigQueryExportArgs added in v0.16.0

type LookupProjectBigQueryExportArgs struct {
	BigQueryExportId string  `pulumi:"bigQueryExportId"`
	Project          *string `pulumi:"project"`
}

type LookupProjectBigQueryExportOutputArgs added in v0.16.0

type LookupProjectBigQueryExportOutputArgs struct {
	BigQueryExportId pulumi.StringInput    `pulumi:"bigQueryExportId"`
	Project          pulumi.StringPtrInput `pulumi:"project"`
}

func (LookupProjectBigQueryExportOutputArgs) ElementType added in v0.16.0

type LookupProjectBigQueryExportResult added in v0.16.0

type LookupProjectBigQueryExportResult struct {
	// The time at which the big query export was created. This field is set by the server and will be ignored if provided on export on creation.
	CreateTime string `pulumi:"createTime"`
	// The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
	Dataset string `pulumi:"dataset"`
	// The description of the export (max of 1024 characters).
	Description string `pulumi:"description"`
	// Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.
	Filter string `pulumi:"filter"`
	// Email address of the user who last edited the big query export. This field is set by the server and will be ignored if provided on export creation or update.
	MostRecentEditor string `pulumi:"mostRecentEditor"`
	// The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.
	Name string `pulumi:"name"`
	// The service account that needs permission to create table, upload data to the big query dataset.
	Principal string `pulumi:"principal"`
	// The most recent time at which the big export was updated. This field is set by the server and will be ignored if provided on export creation or update.
	UpdateTime string `pulumi:"updateTime"`
}

func LookupProjectBigQueryExport added in v0.16.0

func LookupProjectBigQueryExport(ctx *pulumi.Context, args *LookupProjectBigQueryExportArgs, opts ...pulumi.InvokeOption) (*LookupProjectBigQueryExportResult, error)

Gets a big query export.

type LookupProjectBigQueryExportResultOutput added in v0.16.0

type LookupProjectBigQueryExportResultOutput struct{ *pulumi.OutputState }

func (LookupProjectBigQueryExportResultOutput) CreateTime added in v0.16.0

The time at which the big query export was created. This field is set by the server and will be ignored if provided on export on creation.

func (LookupProjectBigQueryExportResultOutput) Dataset added in v0.16.0

The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).

func (LookupProjectBigQueryExportResultOutput) Description added in v0.16.0

The description of the export (max of 1024 characters).

func (LookupProjectBigQueryExportResultOutput) ElementType added in v0.16.0

func (LookupProjectBigQueryExportResultOutput) Filter added in v0.16.0

Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.

func (LookupProjectBigQueryExportResultOutput) MostRecentEditor added in v0.16.0

Email address of the user who last edited the big query export. This field is set by the server and will be ignored if provided on export creation or update.

func (LookupProjectBigQueryExportResultOutput) Name added in v0.16.0

The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.

func (LookupProjectBigQueryExportResultOutput) Principal added in v0.16.0

The service account that needs permission to create table, upload data to the big query dataset.

func (LookupProjectBigQueryExportResultOutput) ToLookupProjectBigQueryExportResultOutput added in v0.16.0

func (o LookupProjectBigQueryExportResultOutput) ToLookupProjectBigQueryExportResultOutput() LookupProjectBigQueryExportResultOutput

func (LookupProjectBigQueryExportResultOutput) ToLookupProjectBigQueryExportResultOutputWithContext added in v0.16.0

func (o LookupProjectBigQueryExportResultOutput) ToLookupProjectBigQueryExportResultOutputWithContext(ctx context.Context) LookupProjectBigQueryExportResultOutput

func (LookupProjectBigQueryExportResultOutput) UpdateTime added in v0.16.0

The most recent time at which the big export was updated. This field is set by the server and will be ignored if provided on export creation or update.

type LookupSourceArgs added in v0.4.0

type LookupSourceArgs struct {
	OrganizationId string `pulumi:"organizationId"`
	SourceId       string `pulumi:"sourceId"`
}

type LookupSourceOutputArgs added in v0.8.0

type LookupSourceOutputArgs struct {
	OrganizationId pulumi.StringInput `pulumi:"organizationId"`
	SourceId       pulumi.StringInput `pulumi:"sourceId"`
}

func (LookupSourceOutputArgs) ElementType added in v0.8.0

func (LookupSourceOutputArgs) ElementType() reflect.Type

type LookupSourceResult added in v0.4.0

type LookupSourceResult struct {
	// The canonical name of the finding. It's either "organizations/{organization_id}/sources/{source_id}", "folders/{folder_id}/sources/{source_id}" or "projects/{project_number}/sources/{source_id}", depending on the closest CRM ancestor of the resource associated with the finding.
	CanonicalName string `pulumi:"canonicalName"`
	// The description of the source (max of 1024 characters). Example: "Web Security Scanner is a web security scanner for common vulnerabilities in App Engine applications. It can automatically scan and detect four common vulnerabilities, including cross-site-scripting (XSS), Flash injection, mixed content (HTTP in HTTPS), and outdated or insecure libraries."
	Description string `pulumi:"description"`
	// The source's display name. A source's display name must be unique amongst its siblings, for example, two sources with the same parent can't share the same display name. The display name must have a length between 1 and 64 characters (inclusive).
	DisplayName string `pulumi:"displayName"`
	// The relative resource name of this source. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}"
	Name string `pulumi:"name"`
}

func LookupSource added in v0.4.0

func LookupSource(ctx *pulumi.Context, args *LookupSourceArgs, opts ...pulumi.InvokeOption) (*LookupSourceResult, error)

Gets a source.

type LookupSourceResultOutput added in v0.8.0

type LookupSourceResultOutput struct{ *pulumi.OutputState }

func LookupSourceOutput added in v0.8.0

func LookupSourceOutput(ctx *pulumi.Context, args LookupSourceOutputArgs, opts ...pulumi.InvokeOption) LookupSourceResultOutput

func (LookupSourceResultOutput) CanonicalName added in v0.8.0

func (o LookupSourceResultOutput) CanonicalName() pulumi.StringOutput

The canonical name of the finding. It's either "organizations/{organization_id}/sources/{source_id}", "folders/{folder_id}/sources/{source_id}" or "projects/{project_number}/sources/{source_id}", depending on the closest CRM ancestor of the resource associated with the finding.

func (LookupSourceResultOutput) Description added in v0.8.0

The description of the source (max of 1024 characters). Example: "Web Security Scanner is a web security scanner for common vulnerabilities in App Engine applications. It can automatically scan and detect four common vulnerabilities, including cross-site-scripting (XSS), Flash injection, mixed content (HTTP in HTTPS), and outdated or insecure libraries."

func (LookupSourceResultOutput) DisplayName added in v0.8.0

The source's display name. A source's display name must be unique amongst its siblings, for example, two sources with the same parent can't share the same display name. The display name must have a length between 1 and 64 characters (inclusive).

func (LookupSourceResultOutput) ElementType added in v0.8.0

func (LookupSourceResultOutput) ElementType() reflect.Type

func (LookupSourceResultOutput) Name added in v0.8.0

The relative resource name of this source. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}"

func (LookupSourceResultOutput) ToLookupSourceResultOutput added in v0.8.0

func (o LookupSourceResultOutput) ToLookupSourceResultOutput() LookupSourceResultOutput

func (LookupSourceResultOutput) ToLookupSourceResultOutputWithContext added in v0.8.0

func (o LookupSourceResultOutput) ToLookupSourceResultOutputWithContext(ctx context.Context) LookupSourceResultOutput

type MuteConfig added in v0.9.0

type MuteConfig struct {
	pulumi.CustomResourceState

	// The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// A description of the mute config.
	Description pulumi.StringOutput `pulumi:"description"`
	// The human readable name to be displayed for the mute config.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
	Filter pulumi.StringOutput `pulumi:"filter"`
	// Email address of the user who last edited the mute config. This field is set by the server and will be ignored if provided on config creation or update.
	MostRecentEditor pulumi.StringOutput `pulumi:"mostRecentEditor"`
	// This field will be ignored if provided on config creation. Format "organizations/{organization}/muteConfigs/{mute_config}" "folders/{folder}/muteConfigs/{mute_config}" "projects/{project}/muteConfigs/{mute_config}"
	Name pulumi.StringOutput `pulumi:"name"`
	// The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a mute config. Auto-naming is currently not supported for this resource.

func GetMuteConfig added in v0.9.0

func GetMuteConfig(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *MuteConfigState, opts ...pulumi.ResourceOption) (*MuteConfig, error)

GetMuteConfig gets an existing MuteConfig resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewMuteConfig added in v0.9.0

func NewMuteConfig(ctx *pulumi.Context,
	name string, args *MuteConfigArgs, opts ...pulumi.ResourceOption) (*MuteConfig, error)

NewMuteConfig registers a new resource with the given unique name, arguments, and options.

func (*MuteConfig) ElementType added in v0.9.0

func (*MuteConfig) ElementType() reflect.Type

func (*MuteConfig) ToMuteConfigOutput added in v0.9.0

func (i *MuteConfig) ToMuteConfigOutput() MuteConfigOutput

func (*MuteConfig) ToMuteConfigOutputWithContext added in v0.9.0

func (i *MuteConfig) ToMuteConfigOutputWithContext(ctx context.Context) MuteConfigOutput

type MuteConfigArgs added in v0.9.0

type MuteConfigArgs struct {
	// A description of the mute config.
	Description pulumi.StringPtrInput
	// The human readable name to be displayed for the mute config.
	DisplayName pulumi.StringPtrInput
	// An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
	Filter pulumi.StringInput
	// Required. Unique identifier provided by the client within the parent scope. It must consist of lower case letters, numbers, and hyphen, with the first character a letter, the last a letter or a number, and a 63 character maximum.
	MuteConfigId pulumi.StringInput
	// This field will be ignored if provided on config creation. Format "organizations/{organization}/muteConfigs/{mute_config}" "folders/{folder}/muteConfigs/{mute_config}" "projects/{project}/muteConfigs/{mute_config}"
	Name    pulumi.StringPtrInput
	Project pulumi.StringPtrInput
}

The set of arguments for constructing a MuteConfig resource.

func (MuteConfigArgs) ElementType added in v0.9.0

func (MuteConfigArgs) ElementType() reflect.Type

type MuteConfigInput added in v0.9.0

type MuteConfigInput interface {
	pulumi.Input

	ToMuteConfigOutput() MuteConfigOutput
	ToMuteConfigOutputWithContext(ctx context.Context) MuteConfigOutput
}

type MuteConfigOutput added in v0.9.0

type MuteConfigOutput struct{ *pulumi.OutputState }

func (MuteConfigOutput) CreateTime added in v0.19.0

func (o MuteConfigOutput) CreateTime() pulumi.StringOutput

The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.

func (MuteConfigOutput) Description added in v0.19.0

func (o MuteConfigOutput) Description() pulumi.StringOutput

A description of the mute config.

func (MuteConfigOutput) DisplayName added in v0.19.0

func (o MuteConfigOutput) DisplayName() pulumi.StringOutput

The human readable name to be displayed for the mute config.

func (MuteConfigOutput) ElementType added in v0.9.0

func (MuteConfigOutput) ElementType() reflect.Type

func (MuteConfigOutput) Filter added in v0.19.0

An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`

func (MuteConfigOutput) MostRecentEditor added in v0.19.0

func (o MuteConfigOutput) MostRecentEditor() pulumi.StringOutput

Email address of the user who last edited the mute config. This field is set by the server and will be ignored if provided on config creation or update.

func (MuteConfigOutput) Name added in v0.19.0

This field will be ignored if provided on config creation. Format "organizations/{organization}/muteConfigs/{mute_config}" "folders/{folder}/muteConfigs/{mute_config}" "projects/{project}/muteConfigs/{mute_config}"

func (MuteConfigOutput) ToMuteConfigOutput added in v0.9.0

func (o MuteConfigOutput) ToMuteConfigOutput() MuteConfigOutput

func (MuteConfigOutput) ToMuteConfigOutputWithContext added in v0.9.0

func (o MuteConfigOutput) ToMuteConfigOutputWithContext(ctx context.Context) MuteConfigOutput

func (MuteConfigOutput) UpdateTime added in v0.19.0

func (o MuteConfigOutput) UpdateTime() pulumi.StringOutput

The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update.

type MuteConfigState added in v0.9.0

type MuteConfigState struct {
}

func (MuteConfigState) ElementType added in v0.9.0

func (MuteConfigState) ElementType() reflect.Type

type NotificationConfig added in v0.3.0

type NotificationConfig struct {
	pulumi.CustomResourceState

	// The description of the notification config (max of 1024 characters).
	Description pulumi.StringOutput `pulumi:"description"`
	// The relative resource name of this notification config. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/notificationConfigs/notify_public_bucket".
	Name pulumi.StringOutput `pulumi:"name"`
	// The Pub/Sub topic to send notifications to. Its format is "projects/[project_id]/topics/[topic]".
	PubsubTopic pulumi.StringOutput `pulumi:"pubsubTopic"`
	// The service account that needs "pubsub.topics.publish" permission to publish to the Pub/Sub topic.
	ServiceAccount pulumi.StringOutput `pulumi:"serviceAccount"`
	// The config for triggering streaming-based notifications.
	StreamingConfig StreamingConfigResponseOutput `pulumi:"streamingConfig"`
}

Creates a notification config.

func GetNotificationConfig added in v0.3.0

func GetNotificationConfig(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *NotificationConfigState, opts ...pulumi.ResourceOption) (*NotificationConfig, error)

GetNotificationConfig gets an existing NotificationConfig resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewNotificationConfig added in v0.3.0

func NewNotificationConfig(ctx *pulumi.Context,
	name string, args *NotificationConfigArgs, opts ...pulumi.ResourceOption) (*NotificationConfig, error)

NewNotificationConfig registers a new resource with the given unique name, arguments, and options.

func (*NotificationConfig) ElementType added in v0.3.0

func (*NotificationConfig) ElementType() reflect.Type

func (*NotificationConfig) ToNotificationConfigOutput added in v0.3.0

func (i *NotificationConfig) ToNotificationConfigOutput() NotificationConfigOutput

func (*NotificationConfig) ToNotificationConfigOutputWithContext added in v0.3.0

func (i *NotificationConfig) ToNotificationConfigOutputWithContext(ctx context.Context) NotificationConfigOutput

type NotificationConfigArgs added in v0.3.0

type NotificationConfigArgs struct {
	// Required. Unique identifier provided by the client within the parent scope. It must be between 1 and 128 characters, and contains alphanumeric characters, underscores or hyphens only.
	ConfigId pulumi.StringInput
	// The description of the notification config (max of 1024 characters).
	Description pulumi.StringPtrInput
	// The relative resource name of this notification config. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/notificationConfigs/notify_public_bucket".
	Name           pulumi.StringPtrInput
	OrganizationId pulumi.StringInput
	// The Pub/Sub topic to send notifications to. Its format is "projects/[project_id]/topics/[topic]".
	PubsubTopic pulumi.StringPtrInput
	// The config for triggering streaming-based notifications.
	StreamingConfig StreamingConfigPtrInput
}

The set of arguments for constructing a NotificationConfig resource.

func (NotificationConfigArgs) ElementType added in v0.3.0

func (NotificationConfigArgs) ElementType() reflect.Type

type NotificationConfigInput added in v0.3.0

type NotificationConfigInput interface {
	pulumi.Input

	ToNotificationConfigOutput() NotificationConfigOutput
	ToNotificationConfigOutputWithContext(ctx context.Context) NotificationConfigOutput
}

type NotificationConfigOutput added in v0.3.0

type NotificationConfigOutput struct{ *pulumi.OutputState }

func (NotificationConfigOutput) Description added in v0.19.0

The description of the notification config (max of 1024 characters).

func (NotificationConfigOutput) ElementType added in v0.3.0

func (NotificationConfigOutput) ElementType() reflect.Type

func (NotificationConfigOutput) Name added in v0.19.0

The relative resource name of this notification config. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/notificationConfigs/notify_public_bucket".

func (NotificationConfigOutput) PubsubTopic added in v0.19.0

The Pub/Sub topic to send notifications to. Its format is "projects/[project_id]/topics/[topic]".

func (NotificationConfigOutput) ServiceAccount added in v0.19.0

func (o NotificationConfigOutput) ServiceAccount() pulumi.StringOutput

The service account that needs "pubsub.topics.publish" permission to publish to the Pub/Sub topic.

func (NotificationConfigOutput) StreamingConfig added in v0.19.0

The config for triggering streaming-based notifications.

func (NotificationConfigOutput) ToNotificationConfigOutput added in v0.3.0

func (o NotificationConfigOutput) ToNotificationConfigOutput() NotificationConfigOutput

func (NotificationConfigOutput) ToNotificationConfigOutputWithContext added in v0.3.0

func (o NotificationConfigOutput) ToNotificationConfigOutputWithContext(ctx context.Context) NotificationConfigOutput

type NotificationConfigState added in v0.3.0

type NotificationConfigState struct {
}

func (NotificationConfigState) ElementType added in v0.3.0

func (NotificationConfigState) ElementType() reflect.Type

type OrganizationBigQueryExport added in v0.16.0

type OrganizationBigQueryExport struct {
	pulumi.CustomResourceState

	// The time at which the big query export was created. This field is set by the server and will be ignored if provided on export on creation.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
	Dataset pulumi.StringOutput `pulumi:"dataset"`
	// The description of the export (max of 1024 characters).
	Description pulumi.StringOutput `pulumi:"description"`
	// Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.
	Filter pulumi.StringOutput `pulumi:"filter"`
	// Email address of the user who last edited the big query export. This field is set by the server and will be ignored if provided on export creation or update.
	MostRecentEditor pulumi.StringOutput `pulumi:"mostRecentEditor"`
	// The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.
	Name pulumi.StringOutput `pulumi:"name"`
	// The service account that needs permission to create table, upload data to the big query dataset.
	Principal pulumi.StringOutput `pulumi:"principal"`
	// The most recent time at which the big export was updated. This field is set by the server and will be ignored if provided on export creation or update.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a big query export.

func GetOrganizationBigQueryExport added in v0.16.0

func GetOrganizationBigQueryExport(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OrganizationBigQueryExportState, opts ...pulumi.ResourceOption) (*OrganizationBigQueryExport, error)

GetOrganizationBigQueryExport gets an existing OrganizationBigQueryExport resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewOrganizationBigQueryExport added in v0.16.0

func NewOrganizationBigQueryExport(ctx *pulumi.Context,
	name string, args *OrganizationBigQueryExportArgs, opts ...pulumi.ResourceOption) (*OrganizationBigQueryExport, error)

NewOrganizationBigQueryExport registers a new resource with the given unique name, arguments, and options.

func (*OrganizationBigQueryExport) ElementType added in v0.16.0

func (*OrganizationBigQueryExport) ElementType() reflect.Type

func (*OrganizationBigQueryExport) ToOrganizationBigQueryExportOutput added in v0.16.0

func (i *OrganizationBigQueryExport) ToOrganizationBigQueryExportOutput() OrganizationBigQueryExportOutput

func (*OrganizationBigQueryExport) ToOrganizationBigQueryExportOutputWithContext added in v0.16.0

func (i *OrganizationBigQueryExport) ToOrganizationBigQueryExportOutputWithContext(ctx context.Context) OrganizationBigQueryExportOutput

type OrganizationBigQueryExportArgs added in v0.16.0

type OrganizationBigQueryExportArgs struct {
	// Required. Unique identifier provided by the client within the parent scope. It must consist of lower case letters, numbers, and hyphen, with the first character a letter, the last a letter or a number, and a 63 character maximum.
	BigQueryExportId pulumi.StringInput
	// The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
	Dataset pulumi.StringPtrInput
	// The description of the export (max of 1024 characters).
	Description pulumi.StringPtrInput
	// Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.
	Filter pulumi.StringPtrInput
	// The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.
	Name           pulumi.StringPtrInput
	OrganizationId pulumi.StringInput
}

The set of arguments for constructing a OrganizationBigQueryExport resource.

func (OrganizationBigQueryExportArgs) ElementType added in v0.16.0

type OrganizationBigQueryExportInput added in v0.16.0

type OrganizationBigQueryExportInput interface {
	pulumi.Input

	ToOrganizationBigQueryExportOutput() OrganizationBigQueryExportOutput
	ToOrganizationBigQueryExportOutputWithContext(ctx context.Context) OrganizationBigQueryExportOutput
}

type OrganizationBigQueryExportOutput added in v0.16.0

type OrganizationBigQueryExportOutput struct{ *pulumi.OutputState }

func (OrganizationBigQueryExportOutput) CreateTime added in v0.19.0

The time at which the big query export was created. This field is set by the server and will be ignored if provided on export on creation.

func (OrganizationBigQueryExportOutput) Dataset added in v0.19.0

The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).

func (OrganizationBigQueryExportOutput) Description added in v0.19.0

The description of the export (max of 1024 characters).

func (OrganizationBigQueryExportOutput) ElementType added in v0.16.0

func (OrganizationBigQueryExportOutput) Filter added in v0.19.0

Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.

func (OrganizationBigQueryExportOutput) MostRecentEditor added in v0.19.0

Email address of the user who last edited the big query export. This field is set by the server and will be ignored if provided on export creation or update.

func (OrganizationBigQueryExportOutput) Name added in v0.19.0

The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.

func (OrganizationBigQueryExportOutput) Principal added in v0.19.0

The service account that needs permission to create table, upload data to the big query dataset.

func (OrganizationBigQueryExportOutput) ToOrganizationBigQueryExportOutput added in v0.16.0

func (o OrganizationBigQueryExportOutput) ToOrganizationBigQueryExportOutput() OrganizationBigQueryExportOutput

func (OrganizationBigQueryExportOutput) ToOrganizationBigQueryExportOutputWithContext added in v0.16.0

func (o OrganizationBigQueryExportOutput) ToOrganizationBigQueryExportOutputWithContext(ctx context.Context) OrganizationBigQueryExportOutput

func (OrganizationBigQueryExportOutput) UpdateTime added in v0.19.0

The most recent time at which the big export was updated. This field is set by the server and will be ignored if provided on export creation or update.

type OrganizationBigQueryExportState added in v0.16.0

type OrganizationBigQueryExportState struct {
}

func (OrganizationBigQueryExportState) ElementType added in v0.16.0

type OrganizationMuteConfig added in v0.9.0

type OrganizationMuteConfig struct {
	pulumi.CustomResourceState

	// The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// A description of the mute config.
	Description pulumi.StringOutput `pulumi:"description"`
	// The human readable name to be displayed for the mute config.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
	Filter pulumi.StringOutput `pulumi:"filter"`
	// Email address of the user who last edited the mute config. This field is set by the server and will be ignored if provided on config creation or update.
	MostRecentEditor pulumi.StringOutput `pulumi:"mostRecentEditor"`
	// This field will be ignored if provided on config creation. Format "organizations/{organization}/muteConfigs/{mute_config}" "folders/{folder}/muteConfigs/{mute_config}" "projects/{project}/muteConfigs/{mute_config}"
	Name pulumi.StringOutput `pulumi:"name"`
	// The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a mute config.

func GetOrganizationMuteConfig added in v0.9.0

func GetOrganizationMuteConfig(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OrganizationMuteConfigState, opts ...pulumi.ResourceOption) (*OrganizationMuteConfig, error)

GetOrganizationMuteConfig gets an existing OrganizationMuteConfig resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewOrganizationMuteConfig added in v0.9.0

func NewOrganizationMuteConfig(ctx *pulumi.Context,
	name string, args *OrganizationMuteConfigArgs, opts ...pulumi.ResourceOption) (*OrganizationMuteConfig, error)

NewOrganizationMuteConfig registers a new resource with the given unique name, arguments, and options.

func (*OrganizationMuteConfig) ElementType added in v0.9.0

func (*OrganizationMuteConfig) ElementType() reflect.Type

func (*OrganizationMuteConfig) ToOrganizationMuteConfigOutput added in v0.9.0

func (i *OrganizationMuteConfig) ToOrganizationMuteConfigOutput() OrganizationMuteConfigOutput

func (*OrganizationMuteConfig) ToOrganizationMuteConfigOutputWithContext added in v0.9.0

func (i *OrganizationMuteConfig) ToOrganizationMuteConfigOutputWithContext(ctx context.Context) OrganizationMuteConfigOutput

type OrganizationMuteConfigArgs added in v0.9.0

type OrganizationMuteConfigArgs struct {
	// A description of the mute config.
	Description pulumi.StringPtrInput
	// The human readable name to be displayed for the mute config.
	DisplayName pulumi.StringPtrInput
	// An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
	Filter pulumi.StringInput
	// Required. Unique identifier provided by the client within the parent scope. It must consist of lower case letters, numbers, and hyphen, with the first character a letter, the last a letter or a number, and a 63 character maximum.
	MuteConfigId pulumi.StringInput
	// This field will be ignored if provided on config creation. Format "organizations/{organization}/muteConfigs/{mute_config}" "folders/{folder}/muteConfigs/{mute_config}" "projects/{project}/muteConfigs/{mute_config}"
	Name           pulumi.StringPtrInput
	OrganizationId pulumi.StringInput
}

The set of arguments for constructing a OrganizationMuteConfig resource.

func (OrganizationMuteConfigArgs) ElementType added in v0.9.0

func (OrganizationMuteConfigArgs) ElementType() reflect.Type

type OrganizationMuteConfigInput added in v0.9.0

type OrganizationMuteConfigInput interface {
	pulumi.Input

	ToOrganizationMuteConfigOutput() OrganizationMuteConfigOutput
	ToOrganizationMuteConfigOutputWithContext(ctx context.Context) OrganizationMuteConfigOutput
}

type OrganizationMuteConfigOutput added in v0.9.0

type OrganizationMuteConfigOutput struct{ *pulumi.OutputState }

func (OrganizationMuteConfigOutput) CreateTime added in v0.19.0

The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.

func (OrganizationMuteConfigOutput) Description added in v0.19.0

A description of the mute config.

func (OrganizationMuteConfigOutput) DisplayName added in v0.19.0

The human readable name to be displayed for the mute config.

func (OrganizationMuteConfigOutput) ElementType added in v0.9.0

func (OrganizationMuteConfigOutput) Filter added in v0.19.0

An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`

func (OrganizationMuteConfigOutput) MostRecentEditor added in v0.19.0

func (o OrganizationMuteConfigOutput) MostRecentEditor() pulumi.StringOutput

Email address of the user who last edited the mute config. This field is set by the server and will be ignored if provided on config creation or update.

func (OrganizationMuteConfigOutput) Name added in v0.19.0

This field will be ignored if provided on config creation. Format "organizations/{organization}/muteConfigs/{mute_config}" "folders/{folder}/muteConfigs/{mute_config}" "projects/{project}/muteConfigs/{mute_config}"

func (OrganizationMuteConfigOutput) ToOrganizationMuteConfigOutput added in v0.9.0

func (o OrganizationMuteConfigOutput) ToOrganizationMuteConfigOutput() OrganizationMuteConfigOutput

func (OrganizationMuteConfigOutput) ToOrganizationMuteConfigOutputWithContext added in v0.9.0

func (o OrganizationMuteConfigOutput) ToOrganizationMuteConfigOutputWithContext(ctx context.Context) OrganizationMuteConfigOutput

func (OrganizationMuteConfigOutput) UpdateTime added in v0.19.0

The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update.

type OrganizationMuteConfigState added in v0.9.0

type OrganizationMuteConfigState struct {
}

func (OrganizationMuteConfigState) ElementType added in v0.9.0

type OrganizationSourceIamPolicy

type OrganizationSourceIamPolicy struct {
	pulumi.CustomResourceState

	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigResponseArrayOutput `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingResponseArrayOutput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntOutput `pulumi:"version"`
}

Sets the access control policy on the specified Source. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetOrganizationSourceIamPolicy

func GetOrganizationSourceIamPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OrganizationSourceIamPolicyState, opts ...pulumi.ResourceOption) (*OrganizationSourceIamPolicy, error)

GetOrganizationSourceIamPolicy gets an existing OrganizationSourceIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewOrganizationSourceIamPolicy

func NewOrganizationSourceIamPolicy(ctx *pulumi.Context,
	name string, args *OrganizationSourceIamPolicyArgs, opts ...pulumi.ResourceOption) (*OrganizationSourceIamPolicy, error)

NewOrganizationSourceIamPolicy registers a new resource with the given unique name, arguments, and options.

func (*OrganizationSourceIamPolicy) ElementType

func (*OrganizationSourceIamPolicy) ElementType() reflect.Type

func (*OrganizationSourceIamPolicy) ToOrganizationSourceIamPolicyOutput

func (i *OrganizationSourceIamPolicy) ToOrganizationSourceIamPolicyOutput() OrganizationSourceIamPolicyOutput

func (*OrganizationSourceIamPolicy) ToOrganizationSourceIamPolicyOutputWithContext

func (i *OrganizationSourceIamPolicy) ToOrganizationSourceIamPolicyOutputWithContext(ctx context.Context) OrganizationSourceIamPolicyOutput

type OrganizationSourceIamPolicyArgs

type OrganizationSourceIamPolicyArgs struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs AuditConfigArrayInput
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings BindingArrayInput
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag           pulumi.StringPtrInput
	OrganizationId pulumi.StringInput
	SourceId       pulumi.StringInput
	// OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"`
	UpdateMask pulumi.StringPtrInput
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a OrganizationSourceIamPolicy resource.

func (OrganizationSourceIamPolicyArgs) ElementType

type OrganizationSourceIamPolicyInput

type OrganizationSourceIamPolicyInput interface {
	pulumi.Input

	ToOrganizationSourceIamPolicyOutput() OrganizationSourceIamPolicyOutput
	ToOrganizationSourceIamPolicyOutputWithContext(ctx context.Context) OrganizationSourceIamPolicyOutput
}

type OrganizationSourceIamPolicyOutput

type OrganizationSourceIamPolicyOutput struct{ *pulumi.OutputState }

func (OrganizationSourceIamPolicyOutput) AuditConfigs added in v0.19.0

Specifies cloud audit logging configuration for this policy.

func (OrganizationSourceIamPolicyOutput) Bindings added in v0.19.0

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (OrganizationSourceIamPolicyOutput) ElementType

func (OrganizationSourceIamPolicyOutput) Etag added in v0.19.0

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (OrganizationSourceIamPolicyOutput) ToOrganizationSourceIamPolicyOutput

func (o OrganizationSourceIamPolicyOutput) ToOrganizationSourceIamPolicyOutput() OrganizationSourceIamPolicyOutput

func (OrganizationSourceIamPolicyOutput) ToOrganizationSourceIamPolicyOutputWithContext

func (o OrganizationSourceIamPolicyOutput) ToOrganizationSourceIamPolicyOutputWithContext(ctx context.Context) OrganizationSourceIamPolicyOutput

func (OrganizationSourceIamPolicyOutput) Version added in v0.19.0

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type OrganizationSourceIamPolicyState

type OrganizationSourceIamPolicyState struct {
}

func (OrganizationSourceIamPolicyState) ElementType

type ProjectBigQueryExport added in v0.16.0

type ProjectBigQueryExport struct {
	pulumi.CustomResourceState

	// The time at which the big query export was created. This field is set by the server and will be ignored if provided on export on creation.
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
	Dataset pulumi.StringOutput `pulumi:"dataset"`
	// The description of the export (max of 1024 characters).
	Description pulumi.StringOutput `pulumi:"description"`
	// Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.
	Filter pulumi.StringOutput `pulumi:"filter"`
	// Email address of the user who last edited the big query export. This field is set by the server and will be ignored if provided on export creation or update.
	MostRecentEditor pulumi.StringOutput `pulumi:"mostRecentEditor"`
	// The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.
	Name pulumi.StringOutput `pulumi:"name"`
	// The service account that needs permission to create table, upload data to the big query dataset.
	Principal pulumi.StringOutput `pulumi:"principal"`
	// The most recent time at which the big export was updated. This field is set by the server and will be ignored if provided on export creation or update.
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

Creates a big query export. Auto-naming is currently not supported for this resource.

func GetProjectBigQueryExport added in v0.16.0

func GetProjectBigQueryExport(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ProjectBigQueryExportState, opts ...pulumi.ResourceOption) (*ProjectBigQueryExport, error)

GetProjectBigQueryExport gets an existing ProjectBigQueryExport resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewProjectBigQueryExport added in v0.16.0

func NewProjectBigQueryExport(ctx *pulumi.Context,
	name string, args *ProjectBigQueryExportArgs, opts ...pulumi.ResourceOption) (*ProjectBigQueryExport, error)

NewProjectBigQueryExport registers a new resource with the given unique name, arguments, and options.

func (*ProjectBigQueryExport) ElementType added in v0.16.0

func (*ProjectBigQueryExport) ElementType() reflect.Type

func (*ProjectBigQueryExport) ToProjectBigQueryExportOutput added in v0.16.0

func (i *ProjectBigQueryExport) ToProjectBigQueryExportOutput() ProjectBigQueryExportOutput

func (*ProjectBigQueryExport) ToProjectBigQueryExportOutputWithContext added in v0.16.0

func (i *ProjectBigQueryExport) ToProjectBigQueryExportOutputWithContext(ctx context.Context) ProjectBigQueryExportOutput

type ProjectBigQueryExportArgs added in v0.16.0

type ProjectBigQueryExportArgs struct {
	// Required. Unique identifier provided by the client within the parent scope. It must consist of lower case letters, numbers, and hyphen, with the first character a letter, the last a letter or a number, and a 63 character maximum.
	BigQueryExportId pulumi.StringInput
	// The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
	Dataset pulumi.StringPtrInput
	// The description of the export (max of 1024 characters).
	Description pulumi.StringPtrInput
	// Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.
	Filter pulumi.StringPtrInput
	// The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.
	Name    pulumi.StringPtrInput
	Project pulumi.StringPtrInput
}

The set of arguments for constructing a ProjectBigQueryExport resource.

func (ProjectBigQueryExportArgs) ElementType added in v0.16.0

func (ProjectBigQueryExportArgs) ElementType() reflect.Type

type ProjectBigQueryExportInput added in v0.16.0

type ProjectBigQueryExportInput interface {
	pulumi.Input

	ToProjectBigQueryExportOutput() ProjectBigQueryExportOutput
	ToProjectBigQueryExportOutputWithContext(ctx context.Context) ProjectBigQueryExportOutput
}

type ProjectBigQueryExportOutput added in v0.16.0

type ProjectBigQueryExportOutput struct{ *pulumi.OutputState }

func (ProjectBigQueryExportOutput) CreateTime added in v0.19.0

The time at which the big query export was created. This field is set by the server and will be ignored if provided on export on creation.

func (ProjectBigQueryExportOutput) Dataset added in v0.19.0

The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).

func (ProjectBigQueryExportOutput) Description added in v0.19.0

The description of the export (max of 1024 characters).

func (ProjectBigQueryExportOutput) ElementType added in v0.16.0

func (ProjectBigQueryExportOutput) Filter added in v0.19.0

Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.

func (ProjectBigQueryExportOutput) MostRecentEditor added in v0.19.0

func (o ProjectBigQueryExportOutput) MostRecentEditor() pulumi.StringOutput

Email address of the user who last edited the big query export. This field is set by the server and will be ignored if provided on export creation or update.

func (ProjectBigQueryExportOutput) Name added in v0.19.0

The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. Example format: "organizations/{organization_id}/bigQueryExports/{export_id}" Example format: "folders/{folder_id}/bigQueryExports/{export_id}" Example format: "projects/{project_id}/bigQueryExports/{export_id}" This field is provided in responses, and is ignored when provided in create requests.

func (ProjectBigQueryExportOutput) Principal added in v0.19.0

The service account that needs permission to create table, upload data to the big query dataset.

func (ProjectBigQueryExportOutput) ToProjectBigQueryExportOutput added in v0.16.0

func (o ProjectBigQueryExportOutput) ToProjectBigQueryExportOutput() ProjectBigQueryExportOutput

func (ProjectBigQueryExportOutput) ToProjectBigQueryExportOutputWithContext added in v0.16.0

func (o ProjectBigQueryExportOutput) ToProjectBigQueryExportOutputWithContext(ctx context.Context) ProjectBigQueryExportOutput

func (ProjectBigQueryExportOutput) UpdateTime added in v0.19.0

The most recent time at which the big export was updated. This field is set by the server and will be ignored if provided on export creation or update.

type ProjectBigQueryExportState added in v0.16.0

type ProjectBigQueryExportState struct {
}

func (ProjectBigQueryExportState) ElementType added in v0.16.0

func (ProjectBigQueryExportState) ElementType() reflect.Type

type Source added in v0.3.0

type Source struct {
	pulumi.CustomResourceState

	// The canonical name of the finding. It's either "organizations/{organization_id}/sources/{source_id}", "folders/{folder_id}/sources/{source_id}" or "projects/{project_number}/sources/{source_id}", depending on the closest CRM ancestor of the resource associated with the finding.
	CanonicalName pulumi.StringOutput `pulumi:"canonicalName"`
	// The description of the source (max of 1024 characters). Example: "Web Security Scanner is a web security scanner for common vulnerabilities in App Engine applications. It can automatically scan and detect four common vulnerabilities, including cross-site-scripting (XSS), Flash injection, mixed content (HTTP in HTTPS), and outdated or insecure libraries."
	Description pulumi.StringOutput `pulumi:"description"`
	// The source's display name. A source's display name must be unique amongst its siblings, for example, two sources with the same parent can't share the same display name. The display name must have a length between 1 and 64 characters (inclusive).
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// The relative resource name of this source. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}"
	Name pulumi.StringOutput `pulumi:"name"`
}

Creates a source. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetSource added in v0.3.0

func GetSource(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SourceState, opts ...pulumi.ResourceOption) (*Source, error)

GetSource gets an existing Source resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSource added in v0.3.0

func NewSource(ctx *pulumi.Context,
	name string, args *SourceArgs, opts ...pulumi.ResourceOption) (*Source, error)

NewSource registers a new resource with the given unique name, arguments, and options.

func (*Source) ElementType added in v0.3.0

func (*Source) ElementType() reflect.Type

func (*Source) ToSourceOutput added in v0.3.0

func (i *Source) ToSourceOutput() SourceOutput

func (*Source) ToSourceOutputWithContext added in v0.3.0

func (i *Source) ToSourceOutputWithContext(ctx context.Context) SourceOutput

type SourceArgs added in v0.3.0

type SourceArgs struct {
	// The canonical name of the finding. It's either "organizations/{organization_id}/sources/{source_id}", "folders/{folder_id}/sources/{source_id}" or "projects/{project_number}/sources/{source_id}", depending on the closest CRM ancestor of the resource associated with the finding.
	CanonicalName pulumi.StringPtrInput
	// The description of the source (max of 1024 characters). Example: "Web Security Scanner is a web security scanner for common vulnerabilities in App Engine applications. It can automatically scan and detect four common vulnerabilities, including cross-site-scripting (XSS), Flash injection, mixed content (HTTP in HTTPS), and outdated or insecure libraries."
	Description pulumi.StringPtrInput
	// The source's display name. A source's display name must be unique amongst its siblings, for example, two sources with the same parent can't share the same display name. The display name must have a length between 1 and 64 characters (inclusive).
	DisplayName pulumi.StringPtrInput
	// The relative resource name of this source. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}"
	Name           pulumi.StringPtrInput
	OrganizationId pulumi.StringInput
}

The set of arguments for constructing a Source resource.

func (SourceArgs) ElementType added in v0.3.0

func (SourceArgs) ElementType() reflect.Type

type SourceInput added in v0.3.0

type SourceInput interface {
	pulumi.Input

	ToSourceOutput() SourceOutput
	ToSourceOutputWithContext(ctx context.Context) SourceOutput
}

type SourceOutput added in v0.3.0

type SourceOutput struct{ *pulumi.OutputState }

func (SourceOutput) CanonicalName added in v0.19.0

func (o SourceOutput) CanonicalName() pulumi.StringOutput

The canonical name of the finding. It's either "organizations/{organization_id}/sources/{source_id}", "folders/{folder_id}/sources/{source_id}" or "projects/{project_number}/sources/{source_id}", depending on the closest CRM ancestor of the resource associated with the finding.

func (SourceOutput) Description added in v0.19.0

func (o SourceOutput) Description() pulumi.StringOutput

The description of the source (max of 1024 characters). Example: "Web Security Scanner is a web security scanner for common vulnerabilities in App Engine applications. It can automatically scan and detect four common vulnerabilities, including cross-site-scripting (XSS), Flash injection, mixed content (HTTP in HTTPS), and outdated or insecure libraries."

func (SourceOutput) DisplayName added in v0.19.0

func (o SourceOutput) DisplayName() pulumi.StringOutput

The source's display name. A source's display name must be unique amongst its siblings, for example, two sources with the same parent can't share the same display name. The display name must have a length between 1 and 64 characters (inclusive).

func (SourceOutput) ElementType added in v0.3.0

func (SourceOutput) ElementType() reflect.Type

func (SourceOutput) Name added in v0.19.0

func (o SourceOutput) Name() pulumi.StringOutput

The relative resource name of this source. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}"

func (SourceOutput) ToSourceOutput added in v0.3.0

func (o SourceOutput) ToSourceOutput() SourceOutput

func (SourceOutput) ToSourceOutputWithContext added in v0.3.0

func (o SourceOutput) ToSourceOutputWithContext(ctx context.Context) SourceOutput

type SourceState added in v0.3.0

type SourceState struct {
}

func (SourceState) ElementType added in v0.3.0

func (SourceState) ElementType() reflect.Type

type StreamingConfig

type StreamingConfig struct {
	// Expression that defines the filter to apply across create/update events of assets or findings as specified by the event type. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.
	Filter *string `pulumi:"filter"`
}

The config for streaming-based notifications, which send each event as soon as it is detected.

type StreamingConfigArgs

type StreamingConfigArgs struct {
	// Expression that defines the filter to apply across create/update events of assets or findings as specified by the event type. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.
	Filter pulumi.StringPtrInput `pulumi:"filter"`
}

The config for streaming-based notifications, which send each event as soon as it is detected.

func (StreamingConfigArgs) ElementType

func (StreamingConfigArgs) ElementType() reflect.Type

func (StreamingConfigArgs) ToStreamingConfigOutput

func (i StreamingConfigArgs) ToStreamingConfigOutput() StreamingConfigOutput

func (StreamingConfigArgs) ToStreamingConfigOutputWithContext

func (i StreamingConfigArgs) ToStreamingConfigOutputWithContext(ctx context.Context) StreamingConfigOutput

func (StreamingConfigArgs) ToStreamingConfigPtrOutput

func (i StreamingConfigArgs) ToStreamingConfigPtrOutput() StreamingConfigPtrOutput

func (StreamingConfigArgs) ToStreamingConfigPtrOutputWithContext

func (i StreamingConfigArgs) ToStreamingConfigPtrOutputWithContext(ctx context.Context) StreamingConfigPtrOutput

type StreamingConfigInput

type StreamingConfigInput interface {
	pulumi.Input

	ToStreamingConfigOutput() StreamingConfigOutput
	ToStreamingConfigOutputWithContext(context.Context) StreamingConfigOutput
}

StreamingConfigInput is an input type that accepts StreamingConfigArgs and StreamingConfigOutput values. You can construct a concrete instance of `StreamingConfigInput` via:

StreamingConfigArgs{...}

type StreamingConfigOutput

type StreamingConfigOutput struct{ *pulumi.OutputState }

The config for streaming-based notifications, which send each event as soon as it is detected.

func (StreamingConfigOutput) ElementType

func (StreamingConfigOutput) ElementType() reflect.Type

func (StreamingConfigOutput) Filter

Expression that defines the filter to apply across create/update events of assets or findings as specified by the event type. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.

func (StreamingConfigOutput) ToStreamingConfigOutput

func (o StreamingConfigOutput) ToStreamingConfigOutput() StreamingConfigOutput

func (StreamingConfigOutput) ToStreamingConfigOutputWithContext

func (o StreamingConfigOutput) ToStreamingConfigOutputWithContext(ctx context.Context) StreamingConfigOutput

func (StreamingConfigOutput) ToStreamingConfigPtrOutput

func (o StreamingConfigOutput) ToStreamingConfigPtrOutput() StreamingConfigPtrOutput

func (StreamingConfigOutput) ToStreamingConfigPtrOutputWithContext

func (o StreamingConfigOutput) ToStreamingConfigPtrOutputWithContext(ctx context.Context) StreamingConfigPtrOutput

type StreamingConfigPtrInput

type StreamingConfigPtrInput interface {
	pulumi.Input

	ToStreamingConfigPtrOutput() StreamingConfigPtrOutput
	ToStreamingConfigPtrOutputWithContext(context.Context) StreamingConfigPtrOutput
}

StreamingConfigPtrInput is an input type that accepts StreamingConfigArgs, StreamingConfigPtr and StreamingConfigPtrOutput values. You can construct a concrete instance of `StreamingConfigPtrInput` via:

        StreamingConfigArgs{...}

or:

        nil

type StreamingConfigPtrOutput

type StreamingConfigPtrOutput struct{ *pulumi.OutputState }

func (StreamingConfigPtrOutput) Elem

func (StreamingConfigPtrOutput) ElementType

func (StreamingConfigPtrOutput) ElementType() reflect.Type

func (StreamingConfigPtrOutput) Filter

Expression that defines the filter to apply across create/update events of assets or findings as specified by the event type. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.

func (StreamingConfigPtrOutput) ToStreamingConfigPtrOutput

func (o StreamingConfigPtrOutput) ToStreamingConfigPtrOutput() StreamingConfigPtrOutput

func (StreamingConfigPtrOutput) ToStreamingConfigPtrOutputWithContext

func (o StreamingConfigPtrOutput) ToStreamingConfigPtrOutputWithContext(ctx context.Context) StreamingConfigPtrOutput

type StreamingConfigResponse

type StreamingConfigResponse struct {
	// Expression that defines the filter to apply across create/update events of assets or findings as specified by the event type. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.
	Filter string `pulumi:"filter"`
}

The config for streaming-based notifications, which send each event as soon as it is detected.

type StreamingConfigResponseOutput

type StreamingConfigResponseOutput struct{ *pulumi.OutputState }

The config for streaming-based notifications, which send each event as soon as it is detected.

func (StreamingConfigResponseOutput) ElementType

func (StreamingConfigResponseOutput) Filter

Expression that defines the filter to apply across create/update events of assets or findings as specified by the event type. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are: * `=` for all value types. * `>`, `<`, `>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes.

func (StreamingConfigResponseOutput) ToStreamingConfigResponseOutput

func (o StreamingConfigResponseOutput) ToStreamingConfigResponseOutput() StreamingConfigResponseOutput

func (StreamingConfigResponseOutput) ToStreamingConfigResponseOutputWithContext

func (o StreamingConfigResponseOutput) ToStreamingConfigResponseOutputWithContext(ctx context.Context) StreamingConfigResponseOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL