Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. assuredworkloads
  5. assuredworkloads/v1
  6. getWorkload

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.assuredworkloads/v1.getWorkload

Explore with Pulumi AI

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

Gets Assured Workload associated with a CRM Node

Using getWorkload

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getWorkload(args: GetWorkloadArgs, opts?: InvokeOptions): Promise<GetWorkloadResult>
function getWorkloadOutput(args: GetWorkloadOutputArgs, opts?: InvokeOptions): Output<GetWorkloadResult>
Copy
def get_workload(location: Optional[str] = None,
                 organization_id: Optional[str] = None,
                 workload_id: Optional[str] = None,
                 opts: Optional[InvokeOptions] = None) -> GetWorkloadResult
def get_workload_output(location: Optional[pulumi.Input[str]] = None,
                 organization_id: Optional[pulumi.Input[str]] = None,
                 workload_id: Optional[pulumi.Input[str]] = None,
                 opts: Optional[InvokeOptions] = None) -> Output[GetWorkloadResult]
Copy
func LookupWorkload(ctx *Context, args *LookupWorkloadArgs, opts ...InvokeOption) (*LookupWorkloadResult, error)
func LookupWorkloadOutput(ctx *Context, args *LookupWorkloadOutputArgs, opts ...InvokeOption) LookupWorkloadResultOutput
Copy

> Note: This function is named LookupWorkload in the Go SDK.

public static class GetWorkload 
{
    public static Task<GetWorkloadResult> InvokeAsync(GetWorkloadArgs args, InvokeOptions? opts = null)
    public static Output<GetWorkloadResult> Invoke(GetWorkloadInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetWorkloadResult> getWorkload(GetWorkloadArgs args, InvokeOptions options)
public static Output<GetWorkloadResult> getWorkload(GetWorkloadArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: google-native:assuredworkloads/v1:getWorkload
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

Location This property is required. string
OrganizationId This property is required. string
WorkloadId This property is required. string
Location This property is required. string
OrganizationId This property is required. string
WorkloadId This property is required. string
location This property is required. String
organizationId This property is required. String
workloadId This property is required. String
location This property is required. string
organizationId This property is required. string
workloadId This property is required. string
location This property is required. str
organization_id This property is required. str
workload_id This property is required. str
location This property is required. String
organizationId This property is required. String
workloadId This property is required. String

getWorkload Result

The following output properties are available:

BillingAccount string
Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
ComplianceRegime string
Immutable. Compliance Regime associated with this workload.
ComplianceStatus Pulumi.GoogleNative.AssuredWorkloads.V1.Outputs.GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponse
Count of active Violations in the Workload.
CompliantButDisallowedServices List<string>
Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
CreateTime string
Immutable. The Workload creation timestamp.
DisplayName string
The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
EkmProvisioningResponse Pulumi.GoogleNative.AssuredWorkloads.V1.Outputs.GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponse
Represents the Ekm Provisioning State of the given workload.
EnableSovereignControls bool
Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
Etag string
Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
KajEnrollmentState string
Represents the KAJ enrollment state of the given workload.
KmsSettings Pulumi.GoogleNative.AssuredWorkloads.V1.Outputs.GoogleCloudAssuredworkloadsV1WorkloadKMSSettingsResponse
Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

Labels Dictionary<string, string>
Optional. Labels applied to the workload.
Name string
Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
Partner string
Optional. Partner regime associated with this workload.
PartnerPermissions Pulumi.GoogleNative.AssuredWorkloads.V1.Outputs.GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissionsResponse
Optional. Permissions granted to the AW Partner SA account for the customer workload
ProvisionedResourcesParent string
Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
ResourceMonitoringEnabled bool
Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
ResourceSettings List<Pulumi.GoogleNative.AssuredWorkloads.V1.Outputs.GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResponse>
Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
Resources List<Pulumi.GoogleNative.AssuredWorkloads.V1.Outputs.GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponse>
The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
SaaEnrollmentResponse Pulumi.GoogleNative.AssuredWorkloads.V1.Outputs.GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponse
Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
ViolationNotificationsEnabled bool
Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
BillingAccount string
Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
ComplianceRegime string
Immutable. Compliance Regime associated with this workload.
ComplianceStatus GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponse
Count of active Violations in the Workload.
CompliantButDisallowedServices []string
Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
CreateTime string
Immutable. The Workload creation timestamp.
DisplayName string
The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
EkmProvisioningResponse GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponse
Represents the Ekm Provisioning State of the given workload.
EnableSovereignControls bool
Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
Etag string
Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
KajEnrollmentState string
Represents the KAJ enrollment state of the given workload.
KmsSettings GoogleCloudAssuredworkloadsV1WorkloadKMSSettingsResponse
Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

Labels map[string]string
Optional. Labels applied to the workload.
Name string
Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
Partner string
Optional. Partner regime associated with this workload.
PartnerPermissions GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissionsResponse
Optional. Permissions granted to the AW Partner SA account for the customer workload
ProvisionedResourcesParent string
Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
ResourceMonitoringEnabled bool
Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
ResourceSettings []GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResponse
Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
Resources []GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponse
The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
SaaEnrollmentResponse GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponse
Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
ViolationNotificationsEnabled bool
Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
billingAccount String
Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
complianceRegime String
Immutable. Compliance Regime associated with this workload.
complianceStatus GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponse
Count of active Violations in the Workload.
compliantButDisallowedServices List<String>
Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
createTime String
Immutable. The Workload creation timestamp.
displayName String
The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
ekmProvisioningResponse GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponse
Represents the Ekm Provisioning State of the given workload.
enableSovereignControls Boolean
Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
etag String
Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
kajEnrollmentState String
Represents the KAJ enrollment state of the given workload.
kmsSettings GoogleCloudAssuredworkloadsV1WorkloadKMSSettingsResponse
Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

labels Map<String,String>
Optional. Labels applied to the workload.
name String
Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
partner String
Optional. Partner regime associated with this workload.
partnerPermissions GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissionsResponse
Optional. Permissions granted to the AW Partner SA account for the customer workload
provisionedResourcesParent String
Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
resourceMonitoringEnabled Boolean
Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
resourceSettings List<GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResponse>
Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
resources List<GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponse>
The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
saaEnrollmentResponse GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponse
Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
violationNotificationsEnabled Boolean
Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
billingAccount string
Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
complianceRegime string
Immutable. Compliance Regime associated with this workload.
complianceStatus GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponse
Count of active Violations in the Workload.
compliantButDisallowedServices string[]
Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
createTime string
Immutable. The Workload creation timestamp.
displayName string
The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
ekmProvisioningResponse GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponse
Represents the Ekm Provisioning State of the given workload.
enableSovereignControls boolean
Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
etag string
Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
kajEnrollmentState string
Represents the KAJ enrollment state of the given workload.
kmsSettings GoogleCloudAssuredworkloadsV1WorkloadKMSSettingsResponse
Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

labels {[key: string]: string}
Optional. Labels applied to the workload.
name string
Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
partner string
Optional. Partner regime associated with this workload.
partnerPermissions GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissionsResponse
Optional. Permissions granted to the AW Partner SA account for the customer workload
provisionedResourcesParent string
Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
resourceMonitoringEnabled boolean
Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
resourceSettings GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResponse[]
Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
resources GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponse[]
The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
saaEnrollmentResponse GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponse
Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
violationNotificationsEnabled boolean
Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
billing_account str
Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
compliance_regime str
Immutable. Compliance Regime associated with this workload.
compliance_status GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponse
Count of active Violations in the Workload.
compliant_but_disallowed_services Sequence[str]
Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
create_time str
Immutable. The Workload creation timestamp.
display_name str
The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
ekm_provisioning_response GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponse
Represents the Ekm Provisioning State of the given workload.
enable_sovereign_controls bool
Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
etag str
Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
kaj_enrollment_state str
Represents the KAJ enrollment state of the given workload.
kms_settings GoogleCloudAssuredworkloadsV1WorkloadKMSSettingsResponse
Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

labels Mapping[str, str]
Optional. Labels applied to the workload.
name str
Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
partner str
Optional. Partner regime associated with this workload.
partner_permissions GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissionsResponse
Optional. Permissions granted to the AW Partner SA account for the customer workload
provisioned_resources_parent str
Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
resource_monitoring_enabled bool
Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
resource_settings Sequence[GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResponse]
Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
resources Sequence[GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponse]
The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
saa_enrollment_response GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponse
Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
violation_notifications_enabled bool
Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.
billingAccount String
Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.
complianceRegime String
Immutable. Compliance Regime associated with this workload.
complianceStatus Property Map
Count of active Violations in the Workload.
compliantButDisallowedServices List<String>
Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.
createTime String
Immutable. The Workload creation timestamp.
displayName String
The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload
ekmProvisioningResponse Property Map
Represents the Ekm Provisioning State of the given workload.
enableSovereignControls Boolean
Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.
etag String
Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.
kajEnrollmentState String
Represents the KAJ enrollment state of the given workload.
kmsSettings Property Map
Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

Deprecated: Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

labels Map<String>
Optional. Labels applied to the workload.
name String
Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.
partner String
Optional. Partner regime associated with this workload.
partnerPermissions Property Map
Optional. Permissions granted to the AW Partner SA account for the customer workload
provisionedResourcesParent String
Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}
resourceMonitoringEnabled Boolean
Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.
resourceSettings List<Property Map>
Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.
resources List<Property Map>
The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.
saaEnrollmentResponse Property Map
Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.
violationNotificationsEnabled Boolean
Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.

Supporting Types

GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponse

AcknowledgedResourceViolationCount This property is required. int
Number of current resource violations which are not acknowledged.
AcknowledgedViolationCount This property is required. int
Number of current orgPolicy violations which are acknowledged.
ActiveResourceViolationCount This property is required. int
Number of current resource violations which are acknowledged.
ActiveViolationCount This property is required. int
Number of current orgPolicy violations which are not acknowledged.
AcknowledgedResourceViolationCount This property is required. int
Number of current resource violations which are not acknowledged.
AcknowledgedViolationCount This property is required. int
Number of current orgPolicy violations which are acknowledged.
ActiveResourceViolationCount This property is required. int
Number of current resource violations which are acknowledged.
ActiveViolationCount This property is required. int
Number of current orgPolicy violations which are not acknowledged.
acknowledgedResourceViolationCount This property is required. Integer
Number of current resource violations which are not acknowledged.
acknowledgedViolationCount This property is required. Integer
Number of current orgPolicy violations which are acknowledged.
activeResourceViolationCount This property is required. Integer
Number of current resource violations which are acknowledged.
activeViolationCount This property is required. Integer
Number of current orgPolicy violations which are not acknowledged.
acknowledgedResourceViolationCount This property is required. number
Number of current resource violations which are not acknowledged.
acknowledgedViolationCount This property is required. number
Number of current orgPolicy violations which are acknowledged.
activeResourceViolationCount This property is required. number
Number of current resource violations which are acknowledged.
activeViolationCount This property is required. number
Number of current orgPolicy violations which are not acknowledged.
acknowledged_resource_violation_count This property is required. int
Number of current resource violations which are not acknowledged.
acknowledged_violation_count This property is required. int
Number of current orgPolicy violations which are acknowledged.
active_resource_violation_count This property is required. int
Number of current resource violations which are acknowledged.
active_violation_count This property is required. int
Number of current orgPolicy violations which are not acknowledged.
acknowledgedResourceViolationCount This property is required. Number
Number of current resource violations which are not acknowledged.
acknowledgedViolationCount This property is required. Number
Number of current orgPolicy violations which are acknowledged.
activeResourceViolationCount This property is required. Number
Number of current resource violations which are acknowledged.
activeViolationCount This property is required. Number
Number of current orgPolicy violations which are not acknowledged.

GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponse

EkmProvisioningErrorDomain This property is required. string
Indicates Ekm provisioning error if any.
EkmProvisioningErrorMapping This property is required. string
Detailed error message if Ekm provisioning fails
EkmProvisioningState This property is required. string
Indicates Ekm enrollment Provisioning of a given workload.
EkmProvisioningErrorDomain This property is required. string
Indicates Ekm provisioning error if any.
EkmProvisioningErrorMapping This property is required. string
Detailed error message if Ekm provisioning fails
EkmProvisioningState This property is required. string
Indicates Ekm enrollment Provisioning of a given workload.
ekmProvisioningErrorDomain This property is required. String
Indicates Ekm provisioning error if any.
ekmProvisioningErrorMapping This property is required. String
Detailed error message if Ekm provisioning fails
ekmProvisioningState This property is required. String
Indicates Ekm enrollment Provisioning of a given workload.
ekmProvisioningErrorDomain This property is required. string
Indicates Ekm provisioning error if any.
ekmProvisioningErrorMapping This property is required. string
Detailed error message if Ekm provisioning fails
ekmProvisioningState This property is required. string
Indicates Ekm enrollment Provisioning of a given workload.
ekm_provisioning_error_domain This property is required. str
Indicates Ekm provisioning error if any.
ekm_provisioning_error_mapping This property is required. str
Detailed error message if Ekm provisioning fails
ekm_provisioning_state This property is required. str
Indicates Ekm enrollment Provisioning of a given workload.
ekmProvisioningErrorDomain This property is required. String
Indicates Ekm provisioning error if any.
ekmProvisioningErrorMapping This property is required. String
Detailed error message if Ekm provisioning fails
ekmProvisioningState This property is required. String
Indicates Ekm enrollment Provisioning of a given workload.

GoogleCloudAssuredworkloadsV1WorkloadKMSSettingsResponse

NextRotationTime This property is required. string
Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
RotationPeriod This property is required. string
Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
NextRotationTime This property is required. string
Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
RotationPeriod This property is required. string
Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
nextRotationTime This property is required. String
Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
rotationPeriod This property is required. String
Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
nextRotationTime This property is required. string
Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
rotationPeriod This property is required. string
Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
next_rotation_time This property is required. str
Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
rotation_period This property is required. str
Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.
nextRotationTime This property is required. String
Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.
rotationPeriod This property is required. String
Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissionsResponse

AssuredWorkloadsMonitoring This property is required. bool
Optional. Allow partner to view violation alerts.
DataLogsViewer This property is required. bool
Allow the partner to view inspectability logs and monitoring violations.
ServiceAccessApprover This property is required. bool
Optional. Allow partner to view access approval logs.
AssuredWorkloadsMonitoring This property is required. bool
Optional. Allow partner to view violation alerts.
DataLogsViewer This property is required. bool
Allow the partner to view inspectability logs and monitoring violations.
ServiceAccessApprover This property is required. bool
Optional. Allow partner to view access approval logs.
assuredWorkloadsMonitoring This property is required. Boolean
Optional. Allow partner to view violation alerts.
dataLogsViewer This property is required. Boolean
Allow the partner to view inspectability logs and monitoring violations.
serviceAccessApprover This property is required. Boolean
Optional. Allow partner to view access approval logs.
assuredWorkloadsMonitoring This property is required. boolean
Optional. Allow partner to view violation alerts.
dataLogsViewer This property is required. boolean
Allow the partner to view inspectability logs and monitoring violations.
serviceAccessApprover This property is required. boolean
Optional. Allow partner to view access approval logs.
assured_workloads_monitoring This property is required. bool
Optional. Allow partner to view violation alerts.
data_logs_viewer This property is required. bool
Allow the partner to view inspectability logs and monitoring violations.
service_access_approver This property is required. bool
Optional. Allow partner to view access approval logs.
assuredWorkloadsMonitoring This property is required. Boolean
Optional. Allow partner to view violation alerts.
dataLogsViewer This property is required. Boolean
Allow the partner to view inspectability logs and monitoring violations.
serviceAccessApprover This property is required. Boolean
Optional. Allow partner to view access approval logs.

GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponse

ResourceId This property is required. string
Resource identifier. For a project this represents project_number.
ResourceType This property is required. string
Indicates the type of resource.
ResourceId This property is required. string
Resource identifier. For a project this represents project_number.
ResourceType This property is required. string
Indicates the type of resource.
resourceId This property is required. String
Resource identifier. For a project this represents project_number.
resourceType This property is required. String
Indicates the type of resource.
resourceId This property is required. string
Resource identifier. For a project this represents project_number.
resourceType This property is required. string
Indicates the type of resource.
resource_id This property is required. str
Resource identifier. For a project this represents project_number.
resource_type This property is required. str
Indicates the type of resource.
resourceId This property is required. String
Resource identifier. For a project this represents project_number.
resourceType This property is required. String
Indicates the type of resource.

GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResponse

DisplayName This property is required. string
User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
ResourceId This property is required. string
Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
ResourceType This property is required. string
Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
DisplayName This property is required. string
User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
ResourceId This property is required. string
Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
ResourceType This property is required. string
Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
displayName This property is required. String
User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
resourceId This property is required. String
Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
resourceType This property is required. String
Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
displayName This property is required. string
User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
resourceId This property is required. string
Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
resourceType This property is required. string
Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
display_name This property is required. str
User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
resource_id This property is required. str
Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
resource_type This property is required. str
Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)
displayName This property is required. String
User-assigned resource display name. If not empty it will be used to create a resource with the specified name.
resourceId This property is required. String
Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.
resourceType This property is required. String
Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponse

SetupErrors This property is required. List<string>
Indicates SAA enrollment setup error if any.
SetupStatus This property is required. string
Indicates SAA enrollment status of a given workload.
SetupErrors This property is required. []string
Indicates SAA enrollment setup error if any.
SetupStatus This property is required. string
Indicates SAA enrollment status of a given workload.
setupErrors This property is required. List<String>
Indicates SAA enrollment setup error if any.
setupStatus This property is required. String
Indicates SAA enrollment status of a given workload.
setupErrors This property is required. string[]
Indicates SAA enrollment setup error if any.
setupStatus This property is required. string
Indicates SAA enrollment status of a given workload.
setup_errors This property is required. Sequence[str]
Indicates SAA enrollment setup error if any.
setup_status This property is required. str
Indicates SAA enrollment status of a given workload.
setupErrors This property is required. List<String>
Indicates SAA enrollment setup error if any.
setupStatus This property is required. String
Indicates SAA enrollment status of a given workload.

Package Details

Repository
Google Cloud Native pulumi/pulumi-google-native
License
Apache-2.0

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native