Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native v2
  3. API Docs
  4. security
  5. StandardAssignment
These are the docs for Azure Native v2. We recommenend using the latest version, Azure Native v3.
Azure Native v2 v2.90.0 published on Thursday, Mar 27, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native-v2.security.StandardAssignment

Explore with Pulumi AI

These are the docs for Azure Native v2. We recommenend using the latest version, Azure Native v3.
Azure Native v2 v2.90.0 published on Thursday, Mar 27, 2025 by Pulumi
pulumi/pulumi-azure-native

Security Assignment on a resource group over a given scope Azure REST API version: 2024-08-01.

Example Usage

Put an audit standard assignment

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var standardAssignment = new AzureNative.Security.StandardAssignment("standardAssignment", new()
    {
        AssignedStandard = new AzureNative.Security.Inputs.AssignedStandardItemArgs
        {
            Id = "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
        },
        Description = "Set of policies monitored by Azure Security Center for cross cloud",
        DisplayName = "ASC Default",
        Effect = AzureNative.Security.Effect.Audit,
        ExcludedScopes = new[] {},
        ResourceId = "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23",
        StandardAssignmentName = "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    });

});
Copy
package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewStandardAssignment(ctx, "standardAssignment", &security.StandardAssignmentArgs{
			AssignedStandard: &security.AssignedStandardItemArgs{
				Id: pulumi.String("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
			},
			Description:            pulumi.String("Set of policies monitored by Azure Security Center for cross cloud"),
			DisplayName:            pulumi.String("ASC Default"),
			Effect:                 pulumi.String(security.EffectAudit),
			ExcludedScopes:         pulumi.StringArray{},
			ResourceId:             pulumi.String("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23"),
			StandardAssignmentName: pulumi.String("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.StandardAssignment;
import com.pulumi.azurenative.security.StandardAssignmentArgs;
import com.pulumi.azurenative.security.inputs.AssignedStandardItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var standardAssignment = new StandardAssignment("standardAssignment", StandardAssignmentArgs.builder()
            .assignedStandard(AssignedStandardItemArgs.builder()
                .id("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
                .build())
            .description("Set of policies monitored by Azure Security Center for cross cloud")
            .displayName("ASC Default")
            .effect("Audit")
            .excludedScopes()
            .resourceId("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23")
            .standardAssignmentName("1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
            .build());

    }
}
Copy
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const standardAssignment = new azure_native.security.StandardAssignment("standardAssignment", {
    assignedStandard: {
        id: "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    },
    description: "Set of policies monitored by Azure Security Center for cross cloud",
    displayName: "ASC Default",
    effect: azure_native.security.Effect.Audit,
    excludedScopes: [],
    resourceId: "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23",
    standardAssignmentName: "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
});
Copy
import pulumi
import pulumi_azure_native as azure_native

standard_assignment = azure_native.security.StandardAssignment("standardAssignment",
    assigned_standard={
        "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    },
    description="Set of policies monitored by Azure Security Center for cross cloud",
    display_name="ASC Default",
    effect=azure_native.security.Effect.AUDIT,
    excluded_scopes=[],
    resource_id="subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23",
    standard_assignment_name="1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
Copy
resources:
  standardAssignment:
    type: azure-native:security:StandardAssignment
    properties:
      assignedStandard:
        id: /providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8
      description: Set of policies monitored by Azure Security Center for cross cloud
      displayName: ASC Default
      effect: Audit
      excludedScopes: []
      resourceId: subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23
      standardAssignmentName: 1f3afdf9-d0c9-4c3d-847f-89da613e70a8
Copy

Put exemption standard assignment

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var standardAssignment = new AzureNative.Security.StandardAssignment("standardAssignment", new()
    {
        AssignedStandard = new AzureNative.Security.Inputs.AssignedStandardItemArgs
        {
            Id = "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
        },
        Description = "Exemption description",
        DisplayName = "Test exemption",
        Effect = AzureNative.Security.Effect.Exempt,
        ExemptionData = new AzureNative.Security.Inputs.StandardAssignmentPropertiesExemptionDataArgs
        {
            AssignedAssessment = new AzureNative.Security.Inputs.AssignedAssessmentItemArgs
            {
                AssessmentKey = "1195afff-c881-495e-9bc5-1486211ae03f",
            },
            ExemptionCategory = AzureNative.Security.ExemptionCategory.Waiver,
        },
        ExpiresOn = "2022-05-01T19:50:47.083633Z",
        ResourceId = "subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA",
        StandardAssignmentName = "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    });

});
Copy
package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewStandardAssignment(ctx, "standardAssignment", &security.StandardAssignmentArgs{
			AssignedStandard: &security.AssignedStandardItemArgs{
				Id: pulumi.String("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
			},
			Description: pulumi.String("Exemption description"),
			DisplayName: pulumi.String("Test exemption"),
			Effect:      pulumi.String(security.EffectExempt),
			ExemptionData: &security.StandardAssignmentPropertiesExemptionDataArgs{
				AssignedAssessment: &security.AssignedAssessmentItemArgs{
					AssessmentKey: pulumi.String("1195afff-c881-495e-9bc5-1486211ae03f"),
				},
				ExemptionCategory: pulumi.String(security.ExemptionCategoryWaiver),
			},
			ExpiresOn:              pulumi.String("2022-05-01T19:50:47.083633Z"),
			ResourceId:             pulumi.String("subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA"),
			StandardAssignmentName: pulumi.String("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.StandardAssignment;
import com.pulumi.azurenative.security.StandardAssignmentArgs;
import com.pulumi.azurenative.security.inputs.AssignedStandardItemArgs;
import com.pulumi.azurenative.security.inputs.StandardAssignmentPropertiesExemptionDataArgs;
import com.pulumi.azurenative.security.inputs.AssignedAssessmentItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var standardAssignment = new StandardAssignment("standardAssignment", StandardAssignmentArgs.builder()
            .assignedStandard(AssignedStandardItemArgs.builder()
                .id("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
                .build())
            .description("Exemption description")
            .displayName("Test exemption")
            .effect("Exempt")
            .exemptionData(StandardAssignmentPropertiesExemptionDataArgs.builder()
                .assignedAssessment(AssignedAssessmentItemArgs.builder()
                    .assessmentKey("1195afff-c881-495e-9bc5-1486211ae03f")
                    .build())
                .exemptionCategory("waiver")
                .build())
            .expiresOn("2022-05-01T19:50:47.083633Z")
            .resourceId("subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA")
            .standardAssignmentName("1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
            .build());

    }
}
Copy
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const standardAssignment = new azure_native.security.StandardAssignment("standardAssignment", {
    assignedStandard: {
        id: "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    },
    description: "Exemption description",
    displayName: "Test exemption",
    effect: azure_native.security.Effect.Exempt,
    exemptionData: {
        assignedAssessment: {
            assessmentKey: "1195afff-c881-495e-9bc5-1486211ae03f",
        },
        exemptionCategory: azure_native.security.ExemptionCategory.Waiver,
    },
    expiresOn: "2022-05-01T19:50:47.083633Z",
    resourceId: "subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA",
    standardAssignmentName: "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
});
Copy
import pulumi
import pulumi_azure_native as azure_native

standard_assignment = azure_native.security.StandardAssignment("standardAssignment",
    assigned_standard={
        "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    },
    description="Exemption description",
    display_name="Test exemption",
    effect=azure_native.security.Effect.EXEMPT,
    exemption_data={
        "assigned_assessment": {
            "assessment_key": "1195afff-c881-495e-9bc5-1486211ae03f",
        },
        "exemption_category": azure_native.security.ExemptionCategory.WAIVER,
    },
    expires_on="2022-05-01T19:50:47.083633Z",
    resource_id="subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA",
    standard_assignment_name="1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
Copy
resources:
  standardAssignment:
    type: azure-native:security:StandardAssignment
    properties:
      assignedStandard:
        id: /providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8
      description: Exemption description
      displayName: Test exemption
      effect: Exempt
      exemptionData:
        assignedAssessment:
          assessmentKey: 1195afff-c881-495e-9bc5-1486211ae03f
        exemptionCategory: waiver
      expiresOn: 2022-05-01T19:50:47.083633Z
      resourceId: subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA
      standardAssignmentName: 1f3afdf9-d0c9-4c3d-847f-89da613e70a8
Copy

Create StandardAssignment Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new StandardAssignment(name: string, args: StandardAssignmentArgs, opts?: CustomResourceOptions);
@overload
def StandardAssignment(resource_name: str,
                       args: StandardAssignmentArgs,
                       opts: Optional[ResourceOptions] = None)

@overload
def StandardAssignment(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       resource_id: Optional[str] = None,
                       assigned_standard: Optional[AssignedStandardItemArgs] = None,
                       attestation_data: Optional[StandardAssignmentPropertiesAttestationDataArgs] = None,
                       description: Optional[str] = None,
                       display_name: Optional[str] = None,
                       effect: Optional[Union[str, Effect]] = None,
                       excluded_scopes: Optional[Sequence[str]] = None,
                       exemption_data: Optional[StandardAssignmentPropertiesExemptionDataArgs] = None,
                       expires_on: Optional[str] = None,
                       standard_assignment_name: Optional[str] = None)
func NewStandardAssignment(ctx *Context, name string, args StandardAssignmentArgs, opts ...ResourceOption) (*StandardAssignment, error)
public StandardAssignment(string name, StandardAssignmentArgs args, CustomResourceOptions? opts = null)
public StandardAssignment(String name, StandardAssignmentArgs args)
public StandardAssignment(String name, StandardAssignmentArgs args, CustomResourceOptions options)

type: azure-native:security:StandardAssignment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. StandardAssignmentArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. StandardAssignmentArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. StandardAssignmentArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. StandardAssignmentArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. StandardAssignmentArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var standardAssignmentResource = new AzureNative.Security.StandardAssignment("standardAssignmentResource", new()
{
    ResourceId = "string",
    AssignedStandard = 
    {
        { "id", "string" },
    },
    AttestationData = 
    {
        { "assignedAssessment", 
        {
            { "assessmentKey", "string" },
        } },
        { "complianceState", "string" },
        { "evidence", new[]
        {
            
            {
                { "description", "string" },
                { "sourceUrl", "string" },
            },
        } },
    },
    Description = "string",
    DisplayName = "string",
    Effect = "string",
    ExcludedScopes = new[]
    {
        "string",
    },
    ExemptionData = 
    {
        { "assignedAssessment", 
        {
            { "assessmentKey", "string" },
        } },
        { "exemptionCategory", "string" },
    },
    ExpiresOn = "string",
    StandardAssignmentName = "string",
});
Copy
example, err := security.NewStandardAssignment(ctx, "standardAssignmentResource", &security.StandardAssignmentArgs{
	ResourceId: "string",
	AssignedStandard: map[string]interface{}{
		"id": "string",
	},
	AttestationData: map[string]interface{}{
		"assignedAssessment": map[string]interface{}{
			"assessmentKey": "string",
		},
		"complianceState": "string",
		"evidence": []map[string]interface{}{
			map[string]interface{}{
				"description": "string",
				"sourceUrl":   "string",
			},
		},
	},
	Description: "string",
	DisplayName: "string",
	Effect:      "string",
	ExcludedScopes: []string{
		"string",
	},
	ExemptionData: map[string]interface{}{
		"assignedAssessment": map[string]interface{}{
			"assessmentKey": "string",
		},
		"exemptionCategory": "string",
	},
	ExpiresOn:              "string",
	StandardAssignmentName: "string",
})
Copy
var standardAssignmentResource = new StandardAssignment("standardAssignmentResource", StandardAssignmentArgs.builder()
    .resourceId("string")
    .assignedStandard(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .attestationData(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .description("string")
    .displayName("string")
    .effect("string")
    .excludedScopes("string")
    .exemptionData(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .expiresOn("string")
    .standardAssignmentName("string")
    .build());
Copy
standard_assignment_resource = azure_native.security.StandardAssignment("standardAssignmentResource",
    resource_id=string,
    assigned_standard={
        id: string,
    },
    attestation_data={
        assignedAssessment: {
            assessmentKey: string,
        },
        complianceState: string,
        evidence: [{
            description: string,
            sourceUrl: string,
        }],
    },
    description=string,
    display_name=string,
    effect=string,
    excluded_scopes=[string],
    exemption_data={
        assignedAssessment: {
            assessmentKey: string,
        },
        exemptionCategory: string,
    },
    expires_on=string,
    standard_assignment_name=string)
Copy
const standardAssignmentResource = new azure_native.security.StandardAssignment("standardAssignmentResource", {
    resourceId: "string",
    assignedStandard: {
        id: "string",
    },
    attestationData: {
        assignedAssessment: {
            assessmentKey: "string",
        },
        complianceState: "string",
        evidence: [{
            description: "string",
            sourceUrl: "string",
        }],
    },
    description: "string",
    displayName: "string",
    effect: "string",
    excludedScopes: ["string"],
    exemptionData: {
        assignedAssessment: {
            assessmentKey: "string",
        },
        exemptionCategory: "string",
    },
    expiresOn: "string",
    standardAssignmentName: "string",
});
Copy
type: azure-native:security:StandardAssignment
properties:
    assignedStandard:
        id: string
    attestationData:
        assignedAssessment:
            assessmentKey: string
        complianceState: string
        evidence:
            - description: string
              sourceUrl: string
    description: string
    displayName: string
    effect: string
    excludedScopes:
        - string
    exemptionData:
        assignedAssessment:
            assessmentKey: string
        exemptionCategory: string
    expiresOn: string
    resourceId: string
    standardAssignmentName: string
Copy

StandardAssignment Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The StandardAssignment resource accepts the following input properties:

ResourceId
This property is required.
Changes to this property will trigger replacement.
string
The identifier of the resource.
AssignedStandard Pulumi.AzureNative.Security.Inputs.AssignedStandardItem
Standard item with key as applied to this standard assignment over the given scope
AttestationData Pulumi.AzureNative.Security.Inputs.StandardAssignmentPropertiesAttestationData
Additional data about assignment that has Attest effect
Description string
Description of the standardAssignment
DisplayName string
Display name of the standardAssignment
Effect string | Pulumi.AzureNative.Security.Effect
Expected effect of this assignment (Audit/Exempt/Attest)
ExcludedScopes List<string>
Excluded scopes, filter out the descendants of the scope (on management scopes)
ExemptionData Pulumi.AzureNative.Security.Inputs.StandardAssignmentPropertiesExemptionData
Additional data about assignment that has Exempt effect
ExpiresOn string
Expiration date of this assignment as a full ISO date
StandardAssignmentName Changes to this property will trigger replacement. string
The standard assignments assignment key - unique key for the standard assignment
ResourceId
This property is required.
Changes to this property will trigger replacement.
string
The identifier of the resource.
AssignedStandard AssignedStandardItemArgs
Standard item with key as applied to this standard assignment over the given scope
AttestationData StandardAssignmentPropertiesAttestationDataArgs
Additional data about assignment that has Attest effect
Description string
Description of the standardAssignment
DisplayName string
Display name of the standardAssignment
Effect string | Effect
Expected effect of this assignment (Audit/Exempt/Attest)
ExcludedScopes []string
Excluded scopes, filter out the descendants of the scope (on management scopes)
ExemptionData StandardAssignmentPropertiesExemptionDataArgs
Additional data about assignment that has Exempt effect
ExpiresOn string
Expiration date of this assignment as a full ISO date
StandardAssignmentName Changes to this property will trigger replacement. string
The standard assignments assignment key - unique key for the standard assignment
resourceId
This property is required.
Changes to this property will trigger replacement.
String
The identifier of the resource.
assignedStandard AssignedStandardItem
Standard item with key as applied to this standard assignment over the given scope
attestationData StandardAssignmentPropertiesAttestationData
Additional data about assignment that has Attest effect
description String
Description of the standardAssignment
displayName String
Display name of the standardAssignment
effect String | Effect
Expected effect of this assignment (Audit/Exempt/Attest)
excludedScopes List<String>
Excluded scopes, filter out the descendants of the scope (on management scopes)
exemptionData StandardAssignmentPropertiesExemptionData
Additional data about assignment that has Exempt effect
expiresOn String
Expiration date of this assignment as a full ISO date
standardAssignmentName Changes to this property will trigger replacement. String
The standard assignments assignment key - unique key for the standard assignment
resourceId
This property is required.
Changes to this property will trigger replacement.
string
The identifier of the resource.
assignedStandard AssignedStandardItem
Standard item with key as applied to this standard assignment over the given scope
attestationData StandardAssignmentPropertiesAttestationData
Additional data about assignment that has Attest effect
description string
Description of the standardAssignment
displayName string
Display name of the standardAssignment
effect string | Effect
Expected effect of this assignment (Audit/Exempt/Attest)
excludedScopes string[]
Excluded scopes, filter out the descendants of the scope (on management scopes)
exemptionData StandardAssignmentPropertiesExemptionData
Additional data about assignment that has Exempt effect
expiresOn string
Expiration date of this assignment as a full ISO date
standardAssignmentName Changes to this property will trigger replacement. string
The standard assignments assignment key - unique key for the standard assignment
resource_id
This property is required.
Changes to this property will trigger replacement.
str
The identifier of the resource.
assigned_standard AssignedStandardItemArgs
Standard item with key as applied to this standard assignment over the given scope
attestation_data StandardAssignmentPropertiesAttestationDataArgs
Additional data about assignment that has Attest effect
description str
Description of the standardAssignment
display_name str
Display name of the standardAssignment
effect str | Effect
Expected effect of this assignment (Audit/Exempt/Attest)
excluded_scopes Sequence[str]
Excluded scopes, filter out the descendants of the scope (on management scopes)
exemption_data StandardAssignmentPropertiesExemptionDataArgs
Additional data about assignment that has Exempt effect
expires_on str
Expiration date of this assignment as a full ISO date
standard_assignment_name Changes to this property will trigger replacement. str
The standard assignments assignment key - unique key for the standard assignment
resourceId
This property is required.
Changes to this property will trigger replacement.
String
The identifier of the resource.
assignedStandard Property Map
Standard item with key as applied to this standard assignment over the given scope
attestationData Property Map
Additional data about assignment that has Attest effect
description String
Description of the standardAssignment
displayName String
Display name of the standardAssignment
effect String | "Audit" | "Exempt" | "Attest"
Expected effect of this assignment (Audit/Exempt/Attest)
excludedScopes List<String>
Excluded scopes, filter out the descendants of the scope (on management scopes)
exemptionData Property Map
Additional data about assignment that has Exempt effect
expiresOn String
Expiration date of this assignment as a full ISO date
standardAssignmentName Changes to this property will trigger replacement. String
The standard assignments assignment key - unique key for the standard assignment

Outputs

All input properties are implicitly available as output properties. Additionally, the StandardAssignment resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Name string
Resource name
Type string
Resource type
Metadata Pulumi.AzureNative.Security.Outputs.StandardAssignmentMetadataResponse
The standard assignment metadata.
Id string
The provider-assigned unique ID for this managed resource.
Name string
Resource name
Type string
Resource type
Metadata StandardAssignmentMetadataResponse
The standard assignment metadata.
id String
The provider-assigned unique ID for this managed resource.
name String
Resource name
type String
Resource type
metadata StandardAssignmentMetadataResponse
The standard assignment metadata.
id string
The provider-assigned unique ID for this managed resource.
name string
Resource name
type string
Resource type
metadata StandardAssignmentMetadataResponse
The standard assignment metadata.
id str
The provider-assigned unique ID for this managed resource.
name str
Resource name
type str
Resource type
metadata StandardAssignmentMetadataResponse
The standard assignment metadata.
id String
The provider-assigned unique ID for this managed resource.
name String
Resource name
type String
Resource type
metadata Property Map
The standard assignment metadata.

Supporting Types

AssignedAssessmentItem
, AssignedAssessmentItemArgs

AssessmentKey string
Unique key to a security assessment object
AssessmentKey string
Unique key to a security assessment object
assessmentKey String
Unique key to a security assessment object
assessmentKey string
Unique key to a security assessment object
assessment_key str
Unique key to a security assessment object
assessmentKey String
Unique key to a security assessment object

AssignedAssessmentItemResponse
, AssignedAssessmentItemResponseArgs

AssessmentKey string
Unique key to a security assessment object
AssessmentKey string
Unique key to a security assessment object
assessmentKey String
Unique key to a security assessment object
assessmentKey string
Unique key to a security assessment object
assessment_key str
Unique key to a security assessment object
assessmentKey String
Unique key to a security assessment object

AssignedStandardItem
, AssignedStandardItemArgs

Id string
Full resourceId of the Microsoft.Security/standard object
Id string
Full resourceId of the Microsoft.Security/standard object
id String
Full resourceId of the Microsoft.Security/standard object
id string
Full resourceId of the Microsoft.Security/standard object
id str
Full resourceId of the Microsoft.Security/standard object
id String
Full resourceId of the Microsoft.Security/standard object

AssignedStandardItemResponse
, AssignedStandardItemResponseArgs

Id string
Full resourceId of the Microsoft.Security/standard object
Id string
Full resourceId of the Microsoft.Security/standard object
id String
Full resourceId of the Microsoft.Security/standard object
id string
Full resourceId of the Microsoft.Security/standard object
id str
Full resourceId of the Microsoft.Security/standard object
id String
Full resourceId of the Microsoft.Security/standard object

AttestationComplianceState
, AttestationComplianceStateArgs

Unknown
unknown
Compliant
compliant
NonCompliant
nonCompliant
AttestationComplianceStateUnknown
unknown
AttestationComplianceStateCompliant
compliant
AttestationComplianceStateNonCompliant
nonCompliant
Unknown
unknown
Compliant
compliant
NonCompliant
nonCompliant
Unknown
unknown
Compliant
compliant
NonCompliant
nonCompliant
UNKNOWN
unknown
COMPLIANT
compliant
NON_COMPLIANT
nonCompliant
"unknown"
unknown
"compliant"
compliant
"nonCompliant"
nonCompliant

AttestationEvidence
, AttestationEvidenceArgs

Description string
The description of the evidence
SourceUrl string
The source url of the evidence
Description string
The description of the evidence
SourceUrl string
The source url of the evidence
description String
The description of the evidence
sourceUrl String
The source url of the evidence
description string
The description of the evidence
sourceUrl string
The source url of the evidence
description str
The description of the evidence
source_url str
The source url of the evidence
description String
The description of the evidence
sourceUrl String
The source url of the evidence

AttestationEvidenceResponse
, AttestationEvidenceResponseArgs

Description string
The description of the evidence
SourceUrl string
The source url of the evidence
Description string
The description of the evidence
SourceUrl string
The source url of the evidence
description String
The description of the evidence
sourceUrl String
The source url of the evidence
description string
The description of the evidence
sourceUrl string
The source url of the evidence
description str
The description of the evidence
source_url str
The source url of the evidence
description String
The description of the evidence
sourceUrl String
The source url of the evidence

Effect
, EffectArgs

Audit
Audit
Exempt
Exempt
Attest
Attest
EffectAudit
Audit
EffectExempt
Exempt
EffectAttest
Attest
Audit
Audit
Exempt
Exempt
Attest
Attest
Audit
Audit
Exempt
Exempt
Attest
Attest
AUDIT
Audit
EXEMPT
Exempt
ATTEST
Attest
"Audit"
Audit
"Exempt"
Exempt
"Attest"
Attest

ExemptionCategory
, ExemptionCategoryArgs

Waiver
waiver
Mitigated
mitigated
ExemptionCategoryWaiver
waiver
ExemptionCategoryMitigated
mitigated
Waiver
waiver
Mitigated
mitigated
Waiver
waiver
Mitigated
mitigated
WAIVER
waiver
MITIGATED
mitigated
"waiver"
waiver
"mitigated"
mitigated

StandardAssignmentMetadataResponse
, StandardAssignmentMetadataResponseArgs

CreatedBy This property is required. string
Standard assignment Created by object id (GUID)
CreatedOn This property is required. string
Standard assignment creation date
LastUpdatedBy This property is required. string
Standard assignment last updated by object id (GUID)
LastUpdatedOn This property is required. string
Standard assignment last update date
CreatedBy This property is required. string
Standard assignment Created by object id (GUID)
CreatedOn This property is required. string
Standard assignment creation date
LastUpdatedBy This property is required. string
Standard assignment last updated by object id (GUID)
LastUpdatedOn This property is required. string
Standard assignment last update date
createdBy This property is required. String
Standard assignment Created by object id (GUID)
createdOn This property is required. String
Standard assignment creation date
lastUpdatedBy This property is required. String
Standard assignment last updated by object id (GUID)
lastUpdatedOn This property is required. String
Standard assignment last update date
createdBy This property is required. string
Standard assignment Created by object id (GUID)
createdOn This property is required. string
Standard assignment creation date
lastUpdatedBy This property is required. string
Standard assignment last updated by object id (GUID)
lastUpdatedOn This property is required. string
Standard assignment last update date
created_by This property is required. str
Standard assignment Created by object id (GUID)
created_on This property is required. str
Standard assignment creation date
last_updated_by This property is required. str
Standard assignment last updated by object id (GUID)
last_updated_on This property is required. str
Standard assignment last update date
createdBy This property is required. String
Standard assignment Created by object id (GUID)
createdOn This property is required. String
Standard assignment creation date
lastUpdatedBy This property is required. String
Standard assignment last updated by object id (GUID)
lastUpdatedOn This property is required. String
Standard assignment last update date

StandardAssignmentPropertiesAttestationData
, StandardAssignmentPropertiesAttestationDataArgs

AssignedAssessment Pulumi.AzureNative.Security.Inputs.AssignedAssessmentItem
Component item with key as applied to this standard assignment over the given scope
ComplianceState string | Pulumi.AzureNative.Security.AttestationComplianceState
Attest category of this assignment
Evidence List<Pulumi.AzureNative.Security.Inputs.AttestationEvidence>
Array of links to attestation evidence
AssignedAssessment AssignedAssessmentItem
Component item with key as applied to this standard assignment over the given scope
ComplianceState string | AttestationComplianceState
Attest category of this assignment
Evidence []AttestationEvidence
Array of links to attestation evidence
assignedAssessment AssignedAssessmentItem
Component item with key as applied to this standard assignment over the given scope
complianceState String | AttestationComplianceState
Attest category of this assignment
evidence List<AttestationEvidence>
Array of links to attestation evidence
assignedAssessment AssignedAssessmentItem
Component item with key as applied to this standard assignment over the given scope
complianceState string | AttestationComplianceState
Attest category of this assignment
evidence AttestationEvidence[]
Array of links to attestation evidence
assigned_assessment AssignedAssessmentItem
Component item with key as applied to this standard assignment over the given scope
compliance_state str | AttestationComplianceState
Attest category of this assignment
evidence Sequence[AttestationEvidence]
Array of links to attestation evidence
assignedAssessment Property Map
Component item with key as applied to this standard assignment over the given scope
complianceState String | "unknown" | "compliant" | "nonCompliant"
Attest category of this assignment
evidence List<Property Map>
Array of links to attestation evidence

StandardAssignmentPropertiesExemptionData
, StandardAssignmentPropertiesExemptionDataArgs

AssignedAssessment Pulumi.AzureNative.Security.Inputs.AssignedAssessmentItem
Component item with key as applied to this standard assignment over the given scope
ExemptionCategory string | Pulumi.AzureNative.Security.ExemptionCategory
Exemption category of this assignment
AssignedAssessment AssignedAssessmentItem
Component item with key as applied to this standard assignment over the given scope
ExemptionCategory string | ExemptionCategory
Exemption category of this assignment
assignedAssessment AssignedAssessmentItem
Component item with key as applied to this standard assignment over the given scope
exemptionCategory String | ExemptionCategory
Exemption category of this assignment
assignedAssessment AssignedAssessmentItem
Component item with key as applied to this standard assignment over the given scope
exemptionCategory string | ExemptionCategory
Exemption category of this assignment
assigned_assessment AssignedAssessmentItem
Component item with key as applied to this standard assignment over the given scope
exemption_category str | ExemptionCategory
Exemption category of this assignment
assignedAssessment Property Map
Component item with key as applied to this standard assignment over the given scope
exemptionCategory String | "waiver" | "mitigated"
Exemption category of this assignment

StandardAssignmentPropertiesResponseAttestationData
, StandardAssignmentPropertiesResponseAttestationDataArgs

ComplianceDate This property is required. string
Attestation compliance date
AssignedAssessment Pulumi.AzureNative.Security.Inputs.AssignedAssessmentItemResponse
Component item with key as applied to this standard assignment over the given scope
ComplianceState string
Attest category of this assignment
Evidence List<Pulumi.AzureNative.Security.Inputs.AttestationEvidenceResponse>
Array of links to attestation evidence
ComplianceDate This property is required. string
Attestation compliance date
AssignedAssessment AssignedAssessmentItemResponse
Component item with key as applied to this standard assignment over the given scope
ComplianceState string
Attest category of this assignment
Evidence []AttestationEvidenceResponse
Array of links to attestation evidence
complianceDate This property is required. String
Attestation compliance date
assignedAssessment AssignedAssessmentItemResponse
Component item with key as applied to this standard assignment over the given scope
complianceState String
Attest category of this assignment
evidence List<AttestationEvidenceResponse>
Array of links to attestation evidence
complianceDate This property is required. string
Attestation compliance date
assignedAssessment AssignedAssessmentItemResponse
Component item with key as applied to this standard assignment over the given scope
complianceState string
Attest category of this assignment
evidence AttestationEvidenceResponse[]
Array of links to attestation evidence
compliance_date This property is required. str
Attestation compliance date
assigned_assessment AssignedAssessmentItemResponse
Component item with key as applied to this standard assignment over the given scope
compliance_state str
Attest category of this assignment
evidence Sequence[AttestationEvidenceResponse]
Array of links to attestation evidence
complianceDate This property is required. String
Attestation compliance date
assignedAssessment Property Map
Component item with key as applied to this standard assignment over the given scope
complianceState String
Attest category of this assignment
evidence List<Property Map>
Array of links to attestation evidence

StandardAssignmentPropertiesResponseExemptionData
, StandardAssignmentPropertiesResponseExemptionDataArgs

AssignedAssessment Pulumi.AzureNative.Security.Inputs.AssignedAssessmentItemResponse
Component item with key as applied to this standard assignment over the given scope
ExemptionCategory string
Exemption category of this assignment
AssignedAssessment AssignedAssessmentItemResponse
Component item with key as applied to this standard assignment over the given scope
ExemptionCategory string
Exemption category of this assignment
assignedAssessment AssignedAssessmentItemResponse
Component item with key as applied to this standard assignment over the given scope
exemptionCategory String
Exemption category of this assignment
assignedAssessment AssignedAssessmentItemResponse
Component item with key as applied to this standard assignment over the given scope
exemptionCategory string
Exemption category of this assignment
assigned_assessment AssignedAssessmentItemResponse
Component item with key as applied to this standard assignment over the given scope
exemption_category str
Exemption category of this assignment
assignedAssessment Property Map
Component item with key as applied to this standard assignment over the given scope
exemptionCategory String
Exemption category of this assignment

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:security:StandardAssignment 1f3afdf9-d0c9-4c3d-847f-89da613e70a8 /{resourceId}/providers/Microsoft.Security/standardAssignments/{standardAssignmentName}
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
azure-native-v2 pulumi/pulumi-azure-native
License
Apache-2.0
These are the docs for Azure Native v2. We recommenend using the latest version, Azure Native v3.
Azure Native v2 v2.90.0 published on Thursday, Mar 27, 2025 by Pulumi
pulumi/pulumi-azure-native