PostureDeployment class

Represents a deployment of a security posture on a resource. A posture contains user curated policy sets. A posture can be deployed on a project or on a folder or on an organization. To deploy a posture we need to populate the posture's name and its revisionId in the posture deployment configuration. Every update to a deployed posture generates a new revision_id. Thus, the updated revisionId should be used in the respective posture deployment's configuration to deploy that posture on a resource.

To get more information about PostureDeployment, see:

• API documentation
• How-to Guides
• Create and deploy a posture

Import

PostureDeployment can be imported using any of these accepted formats:

• {{parent}}/locations/{{location}}/postureDeployments/{{posture_deployment_id}}

When using the pulumi import command, PostureDeployment can be imported using one of the formats above. For example:

$ pulumi import gcp:securityposture/postureDeployment:PostureDeployment default {{parent}}/locations/{{location}}/postureDeployments/{{posture_deployment_id}}

Constructors

PostureDeployment(String name, {PostureDeploymentArgs? args, CustomResourceOptions? options})

Creates a new PostureDeployment. name The Pulumi resource name. args Arguments used to configure this PostureDeployment. The set of arguments for PostureDeployment. options Resource options controlling this resource's behavior.

PostureDeployment.reference(String urn)

Creates a typed reference to an existing PostureDeployment resource.

Properties

childResources → Set<Resource>

final, inherited

completionSources ↔ Map<String, IOutputCompletionSource>

late, final, inherited

createTime ↔ Output<String>

Time the posture deployment was created in UTC.

late, final

deletionPolicy ↔ Output<String>

Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.

late, final

description ↔ Output<String?>

Description of the posture deployment.

late, final

desiredPostureId ↔ Output<String>

This is an output only optional field which will be filled in case when PostureDeployment state is UPDATE_FAILED or CREATE_FAILED or DELETE_FAILED. It denotes the desired posture to be deployed.

late, final

desiredPostureRevisionId ↔ Output<String>

This is an output only optional field which will be filled in case when PostureDeployment state is UPDATE_FAILED or CREATE_FAILED or DELETE_FAILED. It denotes the desired posture revisionId to be deployed.

late, final

etag ↔ Output<String>

For Resource freshness validation (https://google.aip.dev/154)

late, final

failureMessage ↔ Output<String>

This is a output only optional field which will be filled in case where PostureDeployment enters a failure state like UPDATE_FAILED or CREATE_FAILED or DELETE_FAILED. It will have the failure message for posture deployment's CREATE/UPDATE/DELETE methods.

late, final

hashCode → int

The hash code for this object.

no setter, inherited

id ↔ Output<String>

getter/setter pair, inherited

isCustom → bool

Returns whether this resource is provider-managed.

no setter, inherited

isProtected → bool

Returns whether this resource is protected from deletion.

no setter, inherited

isRemote → bool

Whether this resource is registered as remote.

no setter, inherited

isResourceReference → bool

Whether this instance represents a resource value returned over RPC.

final, inherited

location ↔ Output<String>

The location of the resource, eg. global`.

late, final

name ↔ Output<String>

Name of the posture deployment instance.

late, final

parent ↔ Output<String>

The parent of the resource, an organization. Format should be organizations/{organization_id}.

late, final

postureDeploymentId ↔ Output<String>

ID of the posture deployment.

late, final

postureId ↔ Output<String>

Relative name of the posture which needs to be deployed. It should be in the format: organizations/{organization_id}/locations/{location}/postures/{posture_id}

late, final

postureRevisionId ↔ Output<String>

Revision_id the posture which needs to be deployed.

late, final

reconciling ↔ Output<bool>

If set, there are currently changes in flight to the posture deployment.

late, final

resourceTransforms → List<ResourceTransform>

Inherited/explicit async transforms.

no setter, inherited

runtimeType → Type

A representation of the runtime type of the object.

no setter, inherited

state ↔ Output<String>

State of the posture deployment. A posture deployment can be in the following terminal states: ACTIVE, CREATE_FAILED, UPDATE_FAILED, DELETE_FAILED.

late, final

targetResource ↔ Output<String>

The resource on which the posture should be deployed. This can be in one of the following formats: projects/{project_number}, folders/{folder_number}, organizations/{organization_id}

late, final

transformations → List<ResourceTransformation>

Inherited/explicit legacy transformations.

no setter, inherited

updateTime ↔ Output<String>

Time the posture deployment was updated in UTC.

late, final

urn ↔ Output<String>

late, final, inherited

Methods

failId(Object error) → void

Completes this resource ID with an error when registration fails.

inherited

failOutputs(Object error) → void

Completes all output properties with error.

inherited

failUrn(Object error) → void

Completes this resource URN with an error when registration fails.

inherited

getProvider(String moduleMember) → ProviderResource?

Returns provider for moduleMember's package, if configured.

inherited

getResourceName() → String

Returns this resource's logical name.

inherited

getResourceType() → String

Returns this resource's Pulumi type token.

inherited

noSuchMethod(Invocation invocation) → dynamic

Invoked when a nonexistent method or property is accessed.

inherited

registerOutput<T>(String propertyName, {Object? decoder(Object?)?, bool isSecret = false}) → Output<T>

Registers a dynamic output property for this resource.

inherited

resolveId(String? value, {required bool isKnown}) → void

Resolves the provider-assigned ID for this resource.

inherited

resolveOutputs(Struct outputs) → void

Resolves all output properties from a monitor response payload.

inherited

resolveUrn(String value) → void

Resolves this resource's URN once assigned by the engine.

inherited

serializeProperties(Map<String, dynamic> properties) → Future<Struct>

Serializes resource properties for RPC transmission.

inherited

toString() → String

A string representation of this object.

inherited

Operators

operator ==(Object other) → bool

The equality operator.

inherited

Static Methods

get(String name, Input<String> id, {PostureDeploymentState? state, CustomResourceOptions? options}) → PostureDeployment

Gets an existing PostureDeployment resource's state with the given name and id.